last executing test programs: 6.535690825s ago: executing program 0 (id=63): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0x2}, 0x10, &(0x7f00000000c0)={0x7, 0x65a29aea}, &(0x7f0000000100)={0x4}, 0x8) openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/veth0_to_bridge/interval_probe_time_ms\x00', 0x202, 0x0) sendfile$auto(r7, r6, 0x0, 0x48) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4, 0x0) r8 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r8, 0x0, 0xe) 5.664460911s ago: executing program 0 (id=68): read$auto_transactions_fops_(0xffffffffffffffff, &(0x7f0000001140)=""/67, 0x43) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x201, 0x9, 0x4, 0x0) fanotify_mark$auto(r0, 0x1, 0x9, 0x4, 0x0) r1 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000080)=@enable_stats={0x6}, 0x200) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r3, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) renameat$auto(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') 4.63913288s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 4.206485026s ago: executing program 0 (id=77): mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x9f6, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x34440, 0x0) r5 = syz_clone(0x20000, &(0x7f0000000100)="defbc43e6a22abf00ab0dc3851b30473198ab725e1b4bd15156ebdbe9c8cb1ae15b2a5e009c6ff961278cec9784c17b0a9ce79197beb3547691cec96a9e3d56401d1c835be576894a978458c585ef683e4671ee275519975b20881c670c8a69dde81063ca88ca1f12f5089de2fe64311fd46a2f66450661f71fc14e446836ff53fd9973fc17041f0dd01f1fc74635ad3841cf2db15cdd4aad0b6f682335cc86179e010e807f29bb9addac54a76d03bbb3ff4fdc9313efb7630bc7a2ceb4410bff1b69a94ad5b9386801b257483a9a51c25f7", 0xd2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="ebf1cc0afc9e5e52eb230d9ede961b523b8f9658422c427f6cd2b8b4822a24884900771e0a03499c6630c7ffb53ff63ac8238e92369733ebc42caa7bf9de6686ee28cb7c1b9cae") r6 = getuid() r7 = set_tid_address$auto(&(0x7f00000008c0)=0xfffffff8) capset$auto(&(0x7f0000000900)={0x401, 0x0}, &(0x7f0000000940)={0xb7f, 0x7fffffff, 0x88e8}) shmctl$auto_IPC_INFO(0x200, 0x3, &(0x7f0000000a40)={{0x401, r6, 0xee01, 0x1ff, 0x7, 0x5, 0x40}, 0x9, 0x0, 0xfffffffffffffffa, 0x80, @inferred=r7, @inferred=r8, 0x6, 0x0, &(0x7f0000000980)="ebf3a2", &(0x7f00000009c0)="fd415f786b9d2c73d3a3390946399d0980f19ba1e2b0556fa7a38c720385471a26841ec15edca7a27261552984ac7333fd92122585da1a67b528ff0b0d7dafea46c8e0bde82e79b0b835a38d534882b9fa251e46eedbe7386c184e67"}) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000001ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="64170000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES16=r8, @ANYBLOB='\x00'/12, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="afba9dc350b480e65fb2a9aff0102bd9a21f0fce92ec5e3aed2da84f636c96fd500b53810e40195206f34490230ef87319f5d7f387354b54906813c01771a8357a4fedecdef564d0139cc278c8dff188885923a665365cbad54ef2146c8b33c9bee8cc217ca23157192948fb8511d3596c6f55044f4e5fb5fca47ee08d3b74dfd1b99e286416d04abbffa469a6fa70931cbd15dd8da5bdcc90ea3cb65500a191d6450800fe00", @ANYRES32=r6, @ANYBLOB="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"], 0x1764}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r9 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r9, 0x40603d07, 0x0) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x8a200, 0x0) pread64$auto(r10, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000003, 0x8) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 4.013635976s ago: executing program 1 (id=78): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000300)=""/234, 0xea) mmap$auto(0x9, 0x101, 0xffffffffffff7fff, 0xeb1, 0xffffffffffffffff, 0x40000007ffe) ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000000)) socket(0x2, 0x80002, 0x73) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r1, 0x0, 0x7, 0x7) 3.391578907s ago: executing program 1 (id=81): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x9) io_uring_setup$auto(0x8, &(0x7f0000000080)={0xe9, 0xd, 0x10000, 0x6, 0x8001, 0x7fffffff, r0, [], {0xa, 0x6, 0x4, 0x7, 0x100, 0x7ffffffb, 0x104, 0x800, 0x3}, {0x8, 0x3, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x2, 0xe}}) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x100, 0x0) r1 = socket(0xa, 0x2, 0x0) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2cba8000000000900"}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), r2) sendmsg$auto_NFSD_CMD_THREADS_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_SCOPE={0xb, 0x4, '/\\])/}\x00'}, @NFSD_A_SERVER_SCOPE={0xb, 0x4, '{\\)^/^\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2a6c}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, '))'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x800c1) 3.159757692s ago: executing program 0 (id=82): mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_SHM_UNLOCK(0x7f, 0xc, &(0x7f0000000440)={{0x1ff, 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x1000}, 0x8, 0x3ff, 0xfffffffffffff464, 0x6, @inferred, @raw=0x4, 0x1, 0x0, 0x0, 0x0}) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r3, &(0x7f0000000400)={0x0, 0x40}, 0x6) mlock$auto(0xfbe8, 0x4) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) r4 = io_uring_setup$auto(0x9f6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r4, @ANYBLOB="0d566b3d006c9ae6713ad86d770009000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 3.158833234s ago: executing program 3 (id=83): mmap$auto(0xfffffffffffffffd, 0x400408, 0xe0, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys2\x00', 0x1aec1, 0x0) ioctl$auto(r2, 0x4b47, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040029bd7000eedbdf253600000040001a00aa265d893e167e35a9e596a4ca20bd4bb7fdf820c01e55e294765dde1b88385e3cf48af6d1c100c9387a0173c45393de53e8dfb9b2457621da7767730800ef0006080000040035bcdf34fb1b36ce682ff21601080035030600000008005d00f400000045a9df2a717b015535a8077e01b15a6517c5cc48789a801a6386bff50bb421b7af19ba0021f998bd8ca8b7c9aa1a11209f3a622bb0180fa64f0cee8376949c07f9a7bb3bbf74ac76a733f5bc81f6649d37fa5916d460930fa8fe301422ecb7bcf95763f1ffece88a3628225276bcd6d03bb52c16ab7993a919f7a40553d4fa0d0c650a1ade04b6cac86d23f4843e9aa1d2e651d3ab2319fa6eb47072223f446ab23de00fa18b0ffba92f05fb4bb77f52a8d0da24a6ac539b9ee89c47d2f5c85812dfabc4451bdf31b07c91017a392035195644c0a38eff1922ee55636daae16ab594d6e12649ec8d1a6a903554f0ca16f4818abe6eeb47df797fe484be6ba6ae9ca6c801175168155c88fa6d7e"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000000), 0x7f}, 0x6, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)="2391ebc4fdc5c2d69eac79cac4f759145a7a83448c05febf55744fcf34082d065a5102b8964da07b2136e74c4a79ad8a059a60e58555a73b2b5d90f974a445ff35ace6bddd04a0c623458df40286a5606e1af16b326575") sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f00000004c0)=0xe3) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x2800c88c) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) pread64$auto(r9, 0x0, 0x3, 0x1000007ffe) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x24}}, 0x4000000) setreuid$auto(0x9, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 3.121330988s ago: executing program 2 (id=84): socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x80, 0x0) read$auto(r0, 0x0, 0x4) 2.885204682s ago: executing program 2 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 2.719326673s ago: executing program 2 (id=86): openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb1, 0xfffffffffffffffd, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x62, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000200), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/40, 0x28) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) arch_prctl$auto(0x1003, 0xffffffffffffffff) 2.718997961s ago: executing program 3 (id=87): r0 = prctl$auto(0x3e, 0x6558403, 0x0, 0x9, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0xa901, 0x0) signalfd$auto(r2, 0x0, 0x100000000) fsopen$auto(0x0, 0x401) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) ioctl$auto_USBDEVFS_SETCONFIGURATION(r2, 0x80045505, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nilfs2/features/revision\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/19, 0x13) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="6704be1675e4cb2ccecbe2838feb648f06002bbd7000fddbdf2500d529000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6e640, 0x90) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x6, 0x7, 0x5, 0x388, 0x0, 0x3ac41994, r4, [0xc, 0x9, 0x8], {0x2, 0xa, 0x10, 0xbe, 0x81, 0xffff8544, 0xffff, 0xf02, 0xfffffffffffffffb}, {0x2, 0xa20, 0x7, 0x5, 0x930464b, 0x10000009, 0x1040, 0x7, 0x8}}) readahead$auto(r4, 0x7ff, 0xfffffffffffffff8) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000805) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) timerfd_create$auto(0x8, 0x3) socket(0x2, 0xa, 0x0) socketpair$auto(0x35, 0x8, 0xb02a, &(0x7f0000000040)=0x3) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 2.55382718s ago: executing program 1 (id=88): r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) read$auto_transactions_fops_(r0, &(0x7f0000001140)=""/67, 0x43) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r1 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r1, 0x201, 0x9, 0x4, 0x0) fanotify_mark$auto(r1, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) 2.271065521s ago: executing program 3 (id=89): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000300)=""/234, 0xea) mmap$auto(0x9, 0x101, 0xffffffffffff7fff, 0xeb1, 0xffffffffffffffff, 0x40000007ffe) ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000000)) socket(0x2, 0x80002, 0x73) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r1, 0x0, 0x7, 0x7) 2.05666357s ago: executing program 1 (id=90): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0x2}, 0x10, &(0x7f00000000c0)={0x7, 0x65a29aea}, &(0x7f0000000100)={0x4}, 0x8) openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/veth0_to_bridge/interval_probe_time_ms\x00', 0x202, 0x0) sendfile$auto(r7, r6, 0x0, 0x48) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4, 0x0) r8 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r8, 0x0, 0xe) 1.752776443s ago: executing program 1 (id=91): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) timer_create$auto(0x0, 0x0, &(0x7f0000000200)=0x1000004) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16=r3, @ANYBLOB="13002cbd700023723ab36bf877ac08000300", @ANYRES32=r5], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) write$auto(0x1, 0x0, 0x80000000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r7, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 1.752450255s ago: executing program 2 (id=92): r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_transactions_fops_(r0, &(0x7f0000001140)=""/67, 0x43) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r1 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r1, 0x201, 0x9, 0x4, 0x0) fanotify_mark$auto(r1, 0x1, 0x9, 0x4, 0x0) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000080)=@enable_stats={0x6}, 0x200) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r4, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) renameat$auto(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') 1.688731686s ago: executing program 3 (id=93): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) bind$auto(0x3, 0x0, 0x6a) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x80, 0x0) read$auto(r0, 0x0, 0x4) 1.413327139s ago: executing program 3 (id=94): mmap$auto(0xfffffffffffffffd, 0x400408, 0xe0, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys2\x00', 0x1aec1, 0x0) ioctl$auto(r2, 0x4b47, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000000), 0x7f}, 0x6, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)="2391ebc4fdc5c2d69eac79cac4f759145a7a83448c05febf55744fcf34082d065a5102b8964da07b2136e74c4a79ad8a059a60e58555a73b2b5d90f974a445ff35ace6bddd04a0c623458df40286a5606e1af16b326575") sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f00000004c0)=0xe3) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x2800c88c) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) pread64$auto(r9, 0x0, 0x3, 0x1000007ffe) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x24}}, 0x4000000) setreuid$auto(0x9, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.105213685s ago: executing program 2 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 507.571577ms ago: executing program 3 (id=96): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2003, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, r0, 0x7) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(r4, 0x0, 0x6d7, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) bind$auto(r0, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xb, "444cf575c02dd753ff403ac8c6ea"}, 0x6a) fsconfig$auto(0xffffffffffffffff, 0x7, &(0x7f0000000180)='$\x00', &(0x7f00000001c0)="d89d5965d07ace61e655363c888a8aa4e38205d38ad706a731b58fa7499b319e2fbaaec3", 0x0) 506.771394ms ago: executing program 2 (id=97): r0 = prctl$auto(0x3e, 0x6558403, 0x0, 0x9, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0xa901, 0x0) signalfd$auto(r2, 0x0, 0x100000000) fsopen$auto(0x0, 0x401) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) ioctl$auto_USBDEVFS_SETCONFIGURATION(r2, 0x80045505, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nilfs2/features/revision\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/19, 0x13) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="6704be1675e4cb2ccecbe2838feb648f06002bbd7000fddbdf2500d529000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6e640, 0x90) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x6, 0x7, 0x5, 0x388, 0x0, 0x3ac41994, r4, [0xc, 0x9, 0x8], {0x2, 0xa, 0x10, 0xbe, 0x81, 0xffff8544, 0xffff, 0xf02, 0xfffffffffffffffb}, {0x2, 0xa20, 0x7, 0x5, 0x930464b, 0x10000009, 0x1040, 0x7, 0x8}}) readahead$auto(r4, 0x7ff, 0xfffffffffffffff8) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000805) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) timerfd_create$auto(0x8, 0x3) socket(0x2, 0xa, 0x0) socketpair$auto(0x35, 0x8, 0xb02a, &(0x7f0000000040)=0x3) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 288.513808ms ago: executing program 1 (id=98): r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) read$auto_transactions_fops_(r0, &(0x7f0000001140)=""/67, 0x43) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r1 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r1, 0x201, 0x9, 0x4, 0x0) fanotify_mark$auto(r1, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) 0s ago: executing program 0 (id=99): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0x2}, 0x10, &(0x7f00000000c0)={0x7, 0x65a29aea}, &(0x7f0000000100)={0x4}, 0x8) openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/veth0_to_bridge/interval_probe_time_ms\x00', 0x202, 0x0) sendfile$auto(r7, r6, 0x0, 0x48) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4, 0x0) r8 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r8, 0x0, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 99.123151][ T5834] cgroup: Unknown subsys name 'net' [ 99.224782][ T5834] cgroup: Unknown subsys name 'cpuset' [ 99.234861][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.113699][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.441952][ T55] cfg80211: failed to load regulatory.db [ 104.680746][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.689105][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.712550][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.723085][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.730472][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.739116][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.748447][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.757039][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.764258][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.772724][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.773666][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.781311][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.786888][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.794513][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.802713][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.810833][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.817583][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.831168][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.854790][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.872278][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.485789][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 105.508367][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 105.601094][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 105.778903][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.787623][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.795222][ T5852] bridge_slave_0: entered allmulticast mode [ 105.803336][ T5852] bridge_slave_0: entered promiscuous mode [ 105.831248][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.838557][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.846297][ T5852] bridge_slave_1: entered allmulticast mode [ 105.854615][ T5852] bridge_slave_1: entered promiscuous mode [ 105.884255][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 105.942839][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.950288][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.957513][ T5850] bridge_slave_0: entered allmulticast mode [ 105.965927][ T5850] bridge_slave_0: entered promiscuous mode [ 106.011757][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.018928][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.026600][ T5850] bridge_slave_1: entered allmulticast mode [ 106.035159][ T5850] bridge_slave_1: entered promiscuous mode [ 106.058919][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.068928][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.076358][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.084286][ T5851] bridge_slave_0: entered allmulticast mode [ 106.092779][ T5851] bridge_slave_0: entered promiscuous mode [ 106.102306][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.109515][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.116855][ T5851] bridge_slave_1: entered allmulticast mode [ 106.124294][ T5851] bridge_slave_1: entered promiscuous mode [ 106.161881][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.207026][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.253648][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.279752][ T5852] team0: Port device team_slave_0 added [ 106.289299][ T5852] team0: Port device team_slave_1 added [ 106.299102][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.347956][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.376272][ T5850] team0: Port device team_slave_0 added [ 106.398821][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.406335][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.432583][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.485009][ T5850] team0: Port device team_slave_1 added [ 106.492076][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.499076][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.525810][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.551538][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.559354][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.566991][ T5849] bridge_slave_0: entered allmulticast mode [ 106.574559][ T5849] bridge_slave_0: entered promiscuous mode [ 106.626913][ T5851] team0: Port device team_slave_0 added [ 106.633505][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.641066][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.648348][ T5849] bridge_slave_1: entered allmulticast mode [ 106.656129][ T5849] bridge_slave_1: entered promiscuous mode [ 106.665088][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.672535][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.698971][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.712384][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.719397][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.745626][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.760968][ T5851] team0: Port device team_slave_1 added [ 106.839005][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.853980][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.921133][ T5855] Bluetooth: hci1: command tx timeout [ 106.922883][ T51] Bluetooth: hci3: command tx timeout [ 106.927438][ T5855] Bluetooth: hci2: command tx timeout [ 106.933366][ T5863] Bluetooth: hci0: command tx timeout [ 106.979726][ T5852] hsr_slave_0: entered promiscuous mode [ 106.987602][ T5852] hsr_slave_1: entered promiscuous mode [ 106.995711][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.003455][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.029794][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.046758][ T5850] hsr_slave_0: entered promiscuous mode [ 107.054209][ T5850] hsr_slave_1: entered promiscuous mode [ 107.060666][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.068426][ T5850] Cannot create hsr debugfs directory [ 107.079201][ T5849] team0: Port device team_slave_0 added [ 107.088636][ T5849] team0: Port device team_slave_1 added [ 107.096022][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.103093][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.129083][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.215819][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.223847][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.250481][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.265018][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.272327][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.298524][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.415029][ T5851] hsr_slave_0: entered promiscuous mode [ 107.421735][ T5851] hsr_slave_1: entered promiscuous mode [ 107.427867][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.435548][ T5851] Cannot create hsr debugfs directory [ 107.536891][ T5849] hsr_slave_0: entered promiscuous mode [ 107.544418][ T5849] hsr_slave_1: entered promiscuous mode [ 107.551136][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.558737][ T5849] Cannot create hsr debugfs directory [ 107.950727][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.965136][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.986206][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.007385][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.056521][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.069300][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.095777][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.117514][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.192748][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.211960][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.244490][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.264293][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.358854][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.390787][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.413752][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.438724][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.489824][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.565580][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.625650][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.638153][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.645612][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.683736][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.691042][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.716861][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.787935][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.801514][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.853470][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.860729][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.872443][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.879618][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.900819][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.938595][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.945884][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.978755][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.997031][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.000981][ T5863] Bluetooth: hci0: command tx timeout [ 109.004275][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.009551][ T5863] Bluetooth: hci3: command tx timeout [ 109.022923][ T5855] Bluetooth: hci1: command tx timeout [ 109.023437][ T51] Bluetooth: hci2: command tx timeout [ 109.057648][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.064915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.169611][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.176844][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.457862][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.626402][ T5850] veth0_vlan: entered promiscuous mode [ 109.660076][ T5850] veth1_vlan: entered promiscuous mode [ 109.784860][ T5850] veth0_macvtap: entered promiscuous mode [ 109.820182][ T5850] veth1_macvtap: entered promiscuous mode [ 109.909887][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.948345][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.977277][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.999382][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.009799][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.021053][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.029813][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.039073][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.067261][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.217331][ T5852] veth0_vlan: entered promiscuous mode [ 110.265083][ T5849] veth0_vlan: entered promiscuous mode [ 110.296969][ T5851] veth0_vlan: entered promiscuous mode [ 110.307993][ T5852] veth1_vlan: entered promiscuous mode [ 110.316472][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.339537][ T5851] veth1_vlan: entered promiscuous mode [ 110.347942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.390202][ T5849] veth1_vlan: entered promiscuous mode [ 110.434902][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.448912][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.506384][ T5852] veth0_macvtap: entered promiscuous mode [ 110.529899][ T5849] veth0_macvtap: entered promiscuous mode [ 110.555654][ T5851] veth0_macvtap: entered promiscuous mode [ 110.573162][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.576199][ T5852] veth1_macvtap: entered promiscuous mode [ 110.613639][ T5849] veth1_macvtap: entered promiscuous mode [ 110.630118][ T5851] veth1_macvtap: entered promiscuous mode [ 110.689371][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.728704][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.768102][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.784519][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.819885][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.849344][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.871081][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.879866][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.899123][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.908996][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.931103][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.939972][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.941296][ T5939] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.5' sets config #0 [ 110.949575][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.967495][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.979798][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.979845][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.979884][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.979923][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.026748][ T5940] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 111.028655][ T5863] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 111.090554][ T51] Bluetooth: hci3: command tx timeout [ 111.090607][ T51] Bluetooth: hci2: command tx timeout [ 111.090649][ T51] Bluetooth: hci0: command tx timeout [ 111.090689][ T51] Bluetooth: hci1: command tx timeout [ 111.255981][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.279077][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.336685][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.345859][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.422247][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.443865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.494459][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.517269][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.581983][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.589887][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.798359][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.842105][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.842840][ T5946] FAULT_INJECTION: forcing a failure. [ 111.842840][ T5946] name failslab, interval 1, probability 0, space 0, times 1 [ 111.920873][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.2.3 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 111.920920][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.920944][ T5946] Call Trace: [ 111.920954][ T5946] [ 111.920970][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 111.921014][ T5946] should_fail_ex+0x512/0x640 [ 111.921049][ T5946] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 111.921090][ T5946] should_failslab+0xc2/0x120 [ 111.921130][ T5946] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 111.921191][ T5946] ? __alloc_skb+0x2b2/0x380 [ 111.921241][ T5946] __alloc_skb+0x2b2/0x380 [ 111.921273][ T5946] ? __pfx___alloc_skb+0x10/0x10 [ 111.921307][ T5946] ? genl_rcv_msg+0x4bb/0x800 [ 111.921365][ T5946] netlink_ack+0x15d/0xb80 [ 111.921418][ T5946] netlink_rcv_skb+0x332/0x420 [ 111.921460][ T5946] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.921509][ T5946] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.921570][ T5946] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.921617][ T5946] genl_rcv+0x28/0x40 [ 111.921658][ T5946] netlink_unicast+0x58a/0x850 [ 111.921706][ T5946] ? __pfx_netlink_unicast+0x10/0x10 [ 111.921761][ T5946] netlink_sendmsg+0x8d1/0xdd0 [ 111.921811][ T5946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.921870][ T5946] __sys_sendto+0x4a3/0x520 [ 111.921903][ T5946] ? __pfx___sys_sendto+0x10/0x10 [ 111.921947][ T5946] ? find_held_lock+0x2b/0x80 [ 111.922015][ T5946] __x64_sys_sendto+0xe0/0x1c0 [ 111.922045][ T5946] ? do_syscall_64+0x91/0x490 [ 111.922079][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.922112][ T5946] do_syscall_64+0xcd/0x490 [ 111.922150][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.922185][ T5946] RIP: 0033:0x7fb20c99083c [ 111.922225][ T5946] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 111.922258][ T5946] RSP: 002b:00007fb20a7f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 111.922289][ T5946] RAX: ffffffffffffffda RBX: 00007fb20a7f4fc0 RCX: 00007fb20c99083c [ 111.922311][ T5946] RDX: 0000000000000024 RSI: 00007fb20a7f5010 RDI: 0000000000000009 [ 111.922332][ T5946] RBP: 0000000000000000 R08: 00007fb20a7f4f14 R09: 000000000000000c [ 111.922352][ T5946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 111.922371][ T5946] R13: 00007fb20a7f4f68 R14: 00007fb20a7f5010 R15: 0000000000000000 [ 111.922414][ T5946] [ 112.173562][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 113.056627][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.165063][ T5863] Bluetooth: hci1: command tx timeout [ 113.170710][ T51] Bluetooth: hci0: command tx timeout [ 113.170732][ T5857] Bluetooth: hci2: command tx timeout [ 113.176225][ T51] Bluetooth: hci3: command tx timeout [ 113.217570][ T5978] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 113.226779][ T5978] FAULT_INJECTION: forcing a failure. [ 113.226779][ T5978] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.241782][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.0.16 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 113.241827][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.241846][ T5978] Call Trace: [ 113.241857][ T5978] [ 113.241869][ T5978] dump_stack_lvl+0x16c/0x1f0 [ 113.241909][ T5978] should_fail_ex+0x512/0x640 [ 113.241949][ T5978] _copy_to_user+0x32/0xd0 [ 113.241990][ T5978] simple_read_from_buffer+0xcb/0x170 [ 113.242043][ T5978] proc_fail_nth_read+0x197/0x270 [ 113.242104][ T5978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.242154][ T5978] ? rw_verify_area+0xcf/0x680 [ 113.242203][ T5978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.242250][ T5978] vfs_read+0x1e4/0xc60 [ 113.242286][ T5978] ? __pfx___mutex_lock+0x10/0x10 [ 113.242320][ T5978] ? __pfx_vfs_read+0x10/0x10 [ 113.242361][ T5978] ? __fget_files+0x20e/0x3c0 [ 113.242425][ T5978] ksys_read+0x12a/0x250 [ 113.242453][ T5978] ? __pfx_ksys_read+0x10/0x10 [ 113.242495][ T5978] do_syscall_64+0xcd/0x490 [ 113.242531][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.242563][ T5978] RIP: 0033:0x7f128718d3bc [ 113.242589][ T5978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.242617][ T5978] RSP: 002b:00007f128807a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.242646][ T5978] RAX: ffffffffffffffda RBX: 00007f12873b5fa0 RCX: 00007f128718d3bc [ 113.242666][ T5978] RDX: 000000000000000f RSI: 00007f128807a0a0 RDI: 0000000000000004 [ 113.242685][ T5978] RBP: 00007f128807a090 R08: 0000000000000000 R09: 0000000000000000 [ 113.242703][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.242721][ T5978] R13: 0000000000000000 R14: 00007f12873b5fa0 R15: 00007ffe807aa6d8 [ 113.242760][ T5978] [ 113.620481][ T5981] FAULT_INJECTION: forcing a failure. [ 113.620481][ T5981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.682643][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.2.17 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 113.682694][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.682716][ T5981] Call Trace: [ 113.682727][ T5981] [ 113.682740][ T5981] dump_stack_lvl+0x16c/0x1f0 [ 113.682782][ T5981] should_fail_ex+0x512/0x640 [ 113.682824][ T5981] _copy_from_iter+0x463/0x16f0 [ 113.682871][ T5981] ? anon_pipe_write+0x6f1/0x1a70 [ 113.682907][ T5981] ? __pfx__copy_from_iter+0x10/0x10 [ 113.682944][ T5981] ? __pfx___mutex_lock+0x10/0x10 [ 113.682998][ T5981] copy_page_from_iter+0xde/0x180 [ 113.683042][ T5981] anon_pipe_write+0xbe7/0x1a70 [ 113.683107][ T5981] ? __pfx_anon_pipe_write+0x10/0x10 [ 113.683146][ T5981] ? __pfx_autoremove_wake_function+0x10/0x10 [ 113.683195][ T5981] ? preempt_schedule_common+0x44/0xc0 [ 113.683251][ T5981] ? copy_iovec_from_user+0x131/0x170 [ 113.683293][ T5981] do_iter_readv_writev+0x657/0x950 [ 113.683349][ T5981] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 113.683410][ T5981] ? bpf_lsm_file_permission+0x9/0x10 [ 113.683454][ T5981] ? security_file_permission+0x71/0x210 [ 113.683511][ T5981] ? rw_verify_area+0xcf/0x680 [ 113.683566][ T5981] vfs_writev+0x35f/0xde0 [ 113.683639][ T5981] ? __pfx_vfs_writev+0x10/0x10 [ 113.683724][ T5981] ? __fget_files+0x20e/0x3c0 [ 113.683790][ T5981] ? do_writev+0x28c/0x340 [ 113.683839][ T5981] do_writev+0x28c/0x340 [ 113.683892][ T5981] ? __pfx_do_writev+0x10/0x10 [ 113.683943][ T5981] ? syscall_user_dispatch+0x78/0x140 [ 113.684010][ T5981] do_syscall_64+0xcd/0x490 [ 113.684061][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.684098][ T5981] RIP: 0033:0x7fb20c98e9a9 [ 113.684125][ T5981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.684158][ T5981] RSP: 002b:00007fb20a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 113.684189][ T5981] RAX: ffffffffffffffda RBX: 00007fb20cbb5fa0 RCX: 00007fb20c98e9a9 [ 113.684211][ T5981] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000000 [ 113.684231][ T5981] RBP: 00007fb20ca10d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.684251][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.684271][ T5981] R13: 0000000000000000 R14: 00007fb20cbb5fa0 R15: 00007fffa315da08 [ 113.684313][ T5981] [ 114.090072][ T5990] binder: binder_mmap: 5986 0-1000 bad vm_flags failed -1 [ 114.162433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.732667][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 115.060893][ T6002] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.23' sets config #0 [ 115.147858][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 115.436510][ T6010] FAULT_INJECTION: forcing a failure. [ 115.436510][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 115.488775][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.1.27 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 115.488825][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.488845][ T6010] Call Trace: [ 115.488855][ T6010] [ 115.488867][ T6010] dump_stack_lvl+0x16c/0x1f0 [ 115.488908][ T6010] should_fail_ex+0x512/0x640 [ 115.488942][ T6010] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 115.488982][ T6010] should_failslab+0xc2/0x120 [ 115.489024][ T6010] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 115.489060][ T6010] ? ovs_flow_alloc+0x1e/0x210 [ 115.489117][ T6010] ovs_flow_alloc+0x1e/0x210 [ 115.489183][ T6010] ovs_packet_cmd_execute+0x536/0x15b0 [ 115.489225][ T6010] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 115.489266][ T6010] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 115.489319][ T6010] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 115.489379][ T6010] genl_family_rcv_msg_doit+0x209/0x2f0 [ 115.489433][ T6010] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.489484][ T6010] ? trace_cap_capable+0x18d/0x200 [ 115.489537][ T6010] ? bpf_lsm_capable+0x9/0x10 [ 115.489587][ T6010] ? security_capable+0x7e/0x260 [ 115.489630][ T6010] ? ns_capable+0xd7/0x110 [ 115.489670][ T6010] genl_rcv_msg+0x55c/0x800 [ 115.489724][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.489775][ T6010] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 115.489827][ T6010] netlink_rcv_skb+0x158/0x420 [ 115.489869][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.489921][ T6010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.489982][ T6010] ? netlink_deliver_tap+0x1ae/0xd30 [ 115.490029][ T6010] genl_rcv+0x28/0x40 [ 115.490070][ T6010] netlink_unicast+0x58a/0x850 [ 115.490124][ T6010] ? __pfx_netlink_unicast+0x10/0x10 [ 115.490182][ T6010] netlink_sendmsg+0x8d1/0xdd0 [ 115.490228][ T6010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.490282][ T6010] ____sys_sendmsg+0xa95/0xc70 [ 115.490331][ T6010] ? copy_msghdr_from_user+0x10a/0x160 [ 115.490367][ T6010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.490423][ T6010] ? try_to_wake_up+0xa2f/0x1680 [ 115.490465][ T6010] ___sys_sendmsg+0x134/0x1d0 [ 115.490504][ T6010] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.490536][ T6010] ? __lock_acquire+0x622/0x1c90 [ 115.490637][ T6010] __sys_sendmsg+0x16d/0x220 [ 115.490674][ T6010] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.490709][ T6010] ? __x64_sys_futex+0x1e0/0x4c0 [ 115.490778][ T6010] do_syscall_64+0xcd/0x490 [ 115.490816][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.490850][ T6010] RIP: 0033:0x7f8a7b58e9a9 [ 115.490877][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.490909][ T6010] RSP: 002b:00007f8a7c3fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.490940][ T6010] RAX: ffffffffffffffda RBX: 00007f8a7b7b5fa0 RCX: 00007f8a7b58e9a9 [ 115.490962][ T6010] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000008 [ 115.490982][ T6010] RBP: 00007f8a7b610d69 R08: 0000000000000000 R09: 0000000000000000 [ 115.491002][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.491021][ T6010] R13: 0000000000000000 R14: 00007f8a7b7b5fa0 R15: 00007fffa2c18aa8 [ 115.491064][ T6010] [ 115.807267][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.201631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.209587][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 117.327599][ T6040] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.36' sets config #0 [ 117.430216][ T5863] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 117.438742][ T5863] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 117.513550][ T6043] FAULT_INJECTION: forcing a failure. [ 117.513550][ T6043] name failslab, interval 1, probability 0, space 0, times 0 [ 117.610217][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.3.35 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 117.610259][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.610276][ T6043] Call Trace: [ 117.610284][ T6043] [ 117.610295][ T6043] dump_stack_lvl+0x16c/0x1f0 [ 117.610331][ T6043] should_fail_ex+0x512/0x640 [ 117.610359][ T6043] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 117.610394][ T6043] should_failslab+0xc2/0x120 [ 117.610426][ T6043] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 117.610456][ T6043] ? alloc_inode+0xc3/0x240 [ 117.610500][ T6043] alloc_inode+0xc3/0x240 [ 117.610539][ T6043] path_from_stashed+0x2be/0xb00 [ 117.610574][ T6043] ? __pfx_path_from_stashed+0x10/0x10 [ 117.610604][ T6043] ? __pfx_aa_get_newest_label+0x10/0x10 [ 117.610651][ T6043] open_namespace+0x8d/0x190 [ 117.610715][ T6043] ? __pfx_open_namespace+0x10/0x10 [ 117.610770][ T6043] ? bpf_lsm_capable+0x9/0x10 [ 117.610828][ T6043] open_related_ns+0x41/0x70 [ 117.610886][ T6043] __tun_chr_ioctl+0x244c/0x47a0 [ 117.610936][ T6043] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 117.610981][ T6043] ? hook_file_ioctl_common+0x145/0x410 [ 117.611036][ T6043] ? __fget_files+0x20e/0x3c0 [ 117.611096][ T6043] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 117.611137][ T6043] __x64_sys_ioctl+0x18e/0x210 [ 117.611188][ T6043] do_syscall_64+0xcd/0x490 [ 117.611226][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.611261][ T6043] RIP: 0033:0x7fc30278e9a9 [ 117.611289][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.611322][ T6043] RSP: 002b:00007fc3005f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.611353][ T6043] RAX: ffffffffffffffda RBX: 00007fc3029b6160 RCX: 00007fc30278e9a9 [ 117.611374][ T6043] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 117.611394][ T6043] RBP: 00007fc302810d69 R08: 0000000000000000 R09: 0000000000000000 [ 117.611415][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.611434][ T6043] R13: 0000000000000000 R14: 00007fc3029b6160 R15: 00007fff1ee630d8 [ 117.611476][ T6043] [ 117.834815][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.874245][ T6046] Zero length message leads to an empty skb [ 117.920997][ T6049] FAULT_INJECTION: forcing a failure. [ 117.920997][ T6049] name failslab, interval 1, probability 0, space 0, times 0 [ 117.978645][ T6049] CPU: 1 UID: 0 PID: 6049 Comm: syz.1.39 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 117.978706][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.978726][ T6049] Call Trace: [ 117.978737][ T6049] [ 117.978749][ T6049] dump_stack_lvl+0x16c/0x1f0 [ 117.978790][ T6049] should_fail_ex+0x512/0x640 [ 117.978823][ T6049] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 117.978864][ T6049] should_failslab+0xc2/0x120 [ 117.978905][ T6049] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 117.978941][ T6049] ? ovs_flow_alloc+0x1e/0x210 [ 117.978998][ T6049] ovs_flow_alloc+0x1e/0x210 [ 117.979049][ T6049] ovs_packet_cmd_execute+0x536/0x15b0 [ 117.979092][ T6049] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 117.979133][ T6049] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 117.979187][ T6049] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 117.979247][ T6049] genl_family_rcv_msg_doit+0x209/0x2f0 [ 117.979299][ T6049] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.979349][ T6049] ? trace_cap_capable+0x18d/0x200 [ 117.979401][ T6049] ? bpf_lsm_capable+0x9/0x10 [ 117.979451][ T6049] ? security_capable+0x7e/0x260 [ 117.979493][ T6049] ? ns_capable+0xd7/0x110 [ 117.979533][ T6049] genl_rcv_msg+0x55c/0x800 [ 117.979593][ T6049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.979643][ T6049] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 117.979702][ T6049] netlink_rcv_skb+0x158/0x420 [ 117.979745][ T6049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.979796][ T6049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.979858][ T6049] ? netlink_deliver_tap+0x1ae/0xd30 [ 117.979905][ T6049] genl_rcv+0x28/0x40 [ 117.979948][ T6049] netlink_unicast+0x58a/0x850 [ 117.979997][ T6049] ? __pfx_netlink_unicast+0x10/0x10 [ 117.980052][ T6049] netlink_sendmsg+0x8d1/0xdd0 [ 117.980102][ T6049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.980157][ T6049] ____sys_sendmsg+0xa95/0xc70 [ 117.980204][ T6049] ? copy_msghdr_from_user+0x10a/0x160 [ 117.980238][ T6049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.980293][ T6049] ? try_to_wake_up+0xa2f/0x1680 [ 117.980335][ T6049] ___sys_sendmsg+0x134/0x1d0 [ 117.980374][ T6049] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.980406][ T6049] ? __lock_acquire+0x622/0x1c90 [ 117.980516][ T6049] __sys_sendmsg+0x16d/0x220 [ 117.980552][ T6049] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.980613][ T6049] ? __x64_sys_futex+0x1e0/0x4c0 [ 117.980691][ T6049] do_syscall_64+0xcd/0x490 [ 117.980731][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.980766][ T6049] RIP: 0033:0x7f8a7b58e9a9 [ 117.980793][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.980823][ T6049] RSP: 002b:00007f8a7c3fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.980854][ T6049] RAX: ffffffffffffffda RBX: 00007f8a7b7b5fa0 RCX: 00007f8a7b58e9a9 [ 117.980876][ T6049] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000008 [ 117.980897][ T6049] RBP: 00007f8a7b610d69 R08: 0000000000000000 R09: 0000000000000000 [ 117.980916][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.980935][ T6049] R13: 0000000000000000 R14: 00007f8a7b7b5fa0 R15: 00007fffa2c18aa8 [ 117.980978][ T6049] [ 118.296526][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.054711][ T6060] FAULT_INJECTION: forcing a failure. [ 119.054711][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 119.091029][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.3.41 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 119.091077][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.091097][ T6060] Call Trace: [ 119.091108][ T6060] [ 119.091120][ T6060] dump_stack_lvl+0x16c/0x1f0 [ 119.091160][ T6060] should_fail_ex+0x512/0x640 [ 119.091196][ T6060] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 119.091237][ T6060] should_failslab+0xc2/0x120 [ 119.091277][ T6060] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 119.091313][ T6060] ? can_rx_register+0x1ef/0x6f0 [ 119.091355][ T6060] can_rx_register+0x1ef/0x6f0 [ 119.091389][ T6060] ? __pfx_raw_rcv+0x10/0x10 [ 119.091433][ T6060] ? __pfx_can_rx_register+0x10/0x10 [ 119.091470][ T6060] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.091530][ T6060] raw_enable_filters+0xe0/0x210 [ 119.091582][ T6060] raw_enable_allfilters+0x8b/0x2b0 [ 119.091631][ T6060] raw_bind+0x2bc/0xe50 [ 119.091681][ T6060] __sys_bind+0x1a4/0x260 [ 119.091732][ T6060] ? __pfx___sys_bind+0x10/0x10 [ 119.091797][ T6060] ? xfd_validate_state+0x61/0x180 [ 119.091854][ T6060] __x64_sys_bind+0x72/0xb0 [ 119.091901][ T6060] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.091933][ T6060] do_syscall_64+0xcd/0x490 [ 119.091970][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.092003][ T6060] RIP: 0033:0x7fc30278e9a9 [ 119.092031][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.092063][ T6060] RSP: 002b:00007fc303542038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 119.092094][ T6060] RAX: ffffffffffffffda RBX: 00007fc3029b5fa0 RCX: 00007fc30278e9a9 [ 119.092116][ T6060] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 119.092136][ T6060] RBP: 00007fc302810d69 R08: 0000000000000000 R09: 0000000000000000 [ 119.092156][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.092174][ T6060] R13: 0000000000000000 R14: 00007fc3029b5fa0 R15: 00007fff1ee630d8 [ 119.092217][ T6060] [ 119.477320][ T31] audit: type=1800 audit(1753494187.959:2): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.45" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 119.497205][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.573976][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 119.673845][ T6087] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.47' sets config #0 [ 119.802033][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 120.112192][ T6096] FAULT_INJECTION: forcing a failure. [ 120.112192][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 120.173778][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.0.51 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 120.173826][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.173846][ T6096] Call Trace: [ 120.173857][ T6096] [ 120.173868][ T6096] dump_stack_lvl+0x16c/0x1f0 [ 120.173917][ T6096] should_fail_ex+0x512/0x640 [ 120.173951][ T6096] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 120.173990][ T6096] should_failslab+0xc2/0x120 [ 120.174028][ T6096] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 120.174064][ T6096] ? ovs_flow_alloc+0x1e/0x210 [ 120.174118][ T6096] ovs_flow_alloc+0x1e/0x210 [ 120.174167][ T6096] ovs_packet_cmd_execute+0x536/0x15b0 [ 120.174209][ T6096] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 120.174248][ T6096] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 120.174299][ T6096] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 120.174358][ T6096] genl_family_rcv_msg_doit+0x209/0x2f0 [ 120.174409][ T6096] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 120.174458][ T6096] ? trace_cap_capable+0x18d/0x200 [ 120.174509][ T6096] ? bpf_lsm_capable+0x9/0x10 [ 120.174556][ T6096] ? security_capable+0x7e/0x260 [ 120.174596][ T6096] ? ns_capable+0xd7/0x110 [ 120.174634][ T6096] genl_rcv_msg+0x55c/0x800 [ 120.174695][ T6096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.174750][ T6096] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 120.174799][ T6096] netlink_rcv_skb+0x158/0x420 [ 120.174839][ T6096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.174886][ T6096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.174965][ T6096] ? netlink_deliver_tap+0x1ae/0xd30 [ 120.175027][ T6096] genl_rcv+0x28/0x40 [ 120.175069][ T6096] netlink_unicast+0x58a/0x850 [ 120.175117][ T6096] ? __pfx_netlink_unicast+0x10/0x10 [ 120.175171][ T6096] netlink_sendmsg+0x8d1/0xdd0 [ 120.175219][ T6096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.175276][ T6096] ____sys_sendmsg+0xa95/0xc70 [ 120.175324][ T6096] ? copy_msghdr_from_user+0x10a/0x160 [ 120.175358][ T6096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.175413][ T6096] ? __pfx_futex_wake_mark+0x10/0x10 [ 120.175468][ T6096] ___sys_sendmsg+0x134/0x1d0 [ 120.175506][ T6096] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.175538][ T6096] ? __lock_acquire+0x622/0x1c90 [ 120.175634][ T6096] __sys_sendmsg+0x16d/0x220 [ 120.175669][ T6096] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.175703][ T6096] ? __x64_sys_futex+0x1e0/0x4c0 [ 120.175776][ T6096] do_syscall_64+0xcd/0x490 [ 120.175814][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.175848][ T6096] RIP: 0033:0x7f128718e9a9 [ 120.175873][ T6096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.175904][ T6096] RSP: 002b:00007f128807a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.175934][ T6096] RAX: ffffffffffffffda RBX: 00007f12873b5fa0 RCX: 00007f128718e9a9 [ 120.175956][ T6096] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000008 [ 120.175976][ T6096] RBP: 00007f1287210d69 R08: 0000000000000000 R09: 0000000000000000 [ 120.175995][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.176015][ T6096] R13: 0000000000000000 R14: 00007f12873b5fa0 R15: 00007ffe807aa6d8 [ 120.176057][ T6096] [ 121.227873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.273149][ T6122] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 121.323495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.621139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.682902][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 121.760753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.773042][ T6139] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.60' sets config #0 [ 121.953897][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 121.961646][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 122.293314][ T6148] FAULT_INJECTION: forcing a failure. [ 122.293314][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 122.353760][ T6148] CPU: 0 UID: 0 PID: 6148 Comm: syz.0.63 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 122.353807][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.353827][ T6148] Call Trace: [ 122.353837][ T6148] [ 122.353849][ T6148] dump_stack_lvl+0x16c/0x1f0 [ 122.353887][ T6148] should_fail_ex+0x512/0x640 [ 122.353921][ T6148] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 122.353960][ T6148] should_failslab+0xc2/0x120 [ 122.353999][ T6148] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 122.354033][ T6148] ? ovs_flow_alloc+0x1e/0x210 [ 122.354088][ T6148] ovs_flow_alloc+0x1e/0x210 [ 122.354136][ T6148] ovs_packet_cmd_execute+0x536/0x15b0 [ 122.354175][ T6148] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 122.354223][ T6148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 122.354275][ T6148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 122.354334][ T6148] genl_family_rcv_msg_doit+0x209/0x2f0 [ 122.354385][ T6148] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 122.354432][ T6148] ? trace_cap_capable+0x18d/0x200 [ 122.354483][ T6148] ? bpf_lsm_capable+0x9/0x10 [ 122.354531][ T6148] ? security_capable+0x7e/0x260 [ 122.354572][ T6148] ? ns_capable+0xd7/0x110 [ 122.354610][ T6148] genl_rcv_msg+0x55c/0x800 [ 122.354662][ T6148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.354709][ T6148] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 122.354758][ T6148] netlink_rcv_skb+0x158/0x420 [ 122.354799][ T6148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.354847][ T6148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.354904][ T6148] ? netlink_deliver_tap+0x1ae/0xd30 [ 122.354948][ T6148] genl_rcv+0x28/0x40 [ 122.354986][ T6148] netlink_unicast+0x58a/0x850 [ 122.355030][ T6148] ? __pfx_netlink_unicast+0x10/0x10 [ 122.355083][ T6148] netlink_sendmsg+0x8d1/0xdd0 [ 122.355132][ T6148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.355197][ T6148] ____sys_sendmsg+0xa95/0xc70 [ 122.355243][ T6148] ? copy_msghdr_from_user+0x10a/0x160 [ 122.355276][ T6148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.355328][ T6148] ? try_to_wake_up+0xa2f/0x1680 [ 122.355369][ T6148] ___sys_sendmsg+0x134/0x1d0 [ 122.355406][ T6148] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.355436][ T6148] ? __lock_acquire+0x622/0x1c90 [ 122.355533][ T6148] __sys_sendmsg+0x16d/0x220 [ 122.355569][ T6148] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.355602][ T6148] ? __x64_sys_futex+0x1e0/0x4c0 [ 122.355667][ T6148] do_syscall_64+0xcd/0x490 [ 122.355704][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.355737][ T6148] RIP: 0033:0x7f128718e9a9 [ 122.355762][ T6148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.355793][ T6148] RSP: 002b:00007f128807a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.355823][ T6148] RAX: ffffffffffffffda RBX: 00007f12873b5fa0 RCX: 00007f128718e9a9 [ 122.355843][ T6148] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000008 [ 122.355863][ T6148] RBP: 00007f1287210d69 R08: 0000000000000000 R09: 0000000000000000 [ 122.355881][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.355900][ T6148] R13: 0000000000000000 R14: 00007f12873b5fa0 R15: 00007ffe807aa6d8 [ 122.355941][ T6148] [ 123.534322][ T6163] netlink: 342 bytes leftover after parsing attributes in process `syz.2.64'. [ 123.909659][ T6175] netlink: 130 bytes leftover after parsing attributes in process `syz.2.70'. [ 124.022131][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 124.282534][ T6179] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.73' sets config #0 [ 124.396073][ T5863] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 124.396120][ T5863] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 125.707941][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 126.094423][ T6217] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.87' sets config #0 [ 126.220475][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 126.228044][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 127.321284][ T6240] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.91'. [ 127.581844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.682398][ T6240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.844067][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 127.868130][ T6220] netlink: 342 bytes leftover after parsing attributes in process `syz.0.82'. [ 128.061191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.341362][ T6252] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.97' sets config #0 [ 128.520604][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 128.680534][ T5863] ================================================================== [ 128.688674][ T5863] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 128.696565][ T5863] Read of size 140 at addr ffffc900076db000 by task kworker/u9:7/5863 [ 128.704951][ T5863] [ 128.707329][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u9:7 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 128.707372][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.707393][ T5863] Workqueue: hci0 hci_devcd_timeout [ 128.707445][ T5863] Call Trace: [ 128.707455][ T5863] [ 128.707467][ T5863] dump_stack_lvl+0x116/0x1f0 [ 128.707501][ T5863] print_report+0xcd/0x630 [ 128.707538][ T5863] ? __virt_addr_valid+0x81/0x610 [ 128.707576][ T5863] ? hci_devcd_dump+0x142/0x240 [ 128.707621][ T5863] kasan_report+0xe0/0x110 [ 128.707657][ T5863] ? hci_devcd_dump+0x142/0x240 [ 128.707709][ T5863] kasan_check_range+0x100/0x1b0 [ 128.707754][ T5863] __asan_memcpy+0x23/0x60 [ 128.707805][ T5863] hci_devcd_dump+0x142/0x240 [ 128.707863][ T5863] hci_devcd_timeout+0xb5/0x2e0 [ 128.707911][ T5863] ? rcu_is_watching+0x12/0xc0 [ 128.707948][ T5863] process_one_work+0x9cc/0x1b70 [ 128.708008][ T5863] ? __pfx_process_one_work+0x10/0x10 [ 128.708065][ T5863] ? assign_work+0x1a0/0x250 [ 128.708114][ T5863] worker_thread+0x6c8/0xf10 [ 128.708172][ T5863] ? __kthread_parkme+0x19e/0x250 [ 128.708211][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 128.708264][ T5863] kthread+0x3c5/0x780 [ 128.708309][ T5863] ? __pfx_kthread+0x10/0x10 [ 128.708354][ T5863] ? rcu_is_watching+0x12/0xc0 [ 128.708387][ T5863] ? __pfx_kthread+0x10/0x10 [ 128.708434][ T5863] ret_from_fork+0x5d4/0x6f0 [ 128.708475][ T5863] ? __pfx_kthread+0x10/0x10 [ 128.708515][ T5863] ret_from_fork_asm+0x1a/0x30 [ 128.708558][ T5863] [ 128.708570][ T5863] [ 128.861980][ T5863] The buggy address belongs to a vmalloc virtual mapping [ 128.869045][ T5863] Memory state around the buggy address: [ 128.874698][ T5863] ffffc900076daf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.882802][ T5863] ffffc900076daf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.890902][ T5863] >ffffc900076db000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.898986][ T5863] ^ [ 128.903099][ T5863] ffffc900076db080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.911192][ T5863] ffffc900076db100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.919271][ T5863] ================================================================== [ 128.950621][ T5863] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.957911][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: kworker/u9:7 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 128.970132][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.980510][ T5863] Workqueue: hci0 hci_devcd_timeout [ 128.985809][ T5863] Call Trace: [ 128.989133][ T5863] [ 128.992113][ T5863] dump_stack_lvl+0x3d/0x1f0 [ 128.996770][ T5863] panic+0x71c/0x800 [ 129.000748][ T5863] ? __pfx_panic+0x10/0x10 [ 129.005241][ T5863] ? mark_held_locks+0x49/0x80 [ 129.010086][ T5863] ? preempt_schedule_thunk+0x16/0x30 [ 129.015532][ T5863] ? hci_devcd_dump+0x142/0x240 [ 129.020464][ T5863] ? preempt_schedule_common+0x44/0xc0 [ 129.026009][ T5863] ? check_panic_on_warn+0x1f/0xb0 [ 129.031205][ T5863] ? hci_devcd_dump+0x142/0x240 [ 129.036138][ T5863] check_panic_on_warn+0xab/0xb0 [ 129.041162][ T5863] end_report+0x107/0x170 [ 129.045561][ T5863] kasan_report+0xee/0x110 [ 129.050057][ T5863] ? hci_devcd_dump+0x142/0x240 [ 129.054999][ T5863] kasan_check_range+0x100/0x1b0 [ 129.060192][ T5863] __asan_memcpy+0x23/0x60 [ 129.064683][ T5863] hci_devcd_dump+0x142/0x240 [ 129.069410][ T5863] hci_devcd_timeout+0xb5/0x2e0 [ 129.074307][ T5863] ? rcu_is_watching+0x12/0xc0 [ 129.079110][ T5863] process_one_work+0x9cc/0x1b70 [ 129.084116][ T5863] ? __pfx_process_one_work+0x10/0x10 [ 129.089539][ T5863] ? assign_work+0x1a0/0x250 [ 129.094179][ T5863] worker_thread+0x6c8/0xf10 [ 129.098820][ T5863] ? __kthread_parkme+0x19e/0x250 [ 129.103886][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 129.109050][ T5863] kthread+0x3c5/0x780 [ 129.113164][ T5863] ? __pfx_kthread+0x10/0x10 [ 129.117800][ T5863] ? rcu_is_watching+0x12/0xc0 [ 129.122610][ T5863] ? __pfx_kthread+0x10/0x10 [ 129.127244][ T5863] ret_from_fork+0x5d4/0x6f0 [ 129.131873][ T5863] ? __pfx_kthread+0x10/0x10 [ 129.136506][ T5863] ret_from_fork_asm+0x1a/0x30 [ 129.141317][ T5863] [ 129.144520][ T5863] Kernel Offset: disabled [ 129.148877][ T5863] Rebooting in 86400 seconds..