last executing test programs: 1m56.847870595s ago: executing program 2 (id=1507): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x41c03, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x9}, 0x8}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) clone$auto(0x3, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x2, 0x7) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) sysfs$auto(0x2, 0x49, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fdbcdf2501"], 0x1c}}, 0x40000) 1m56.382292358s ago: executing program 2 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e535200090002"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 1m56.222061964s ago: executing program 2 (id=1511): getpid() socket(0x18, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = inotify_init1$auto(0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = prctl$auto(0x3b, 0x2, 0x0, 0x4, 0x0) splice$auto(r3, &(0x7f0000000000)=0x9, r3, 0x0, 0xb, 0x1) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000010) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r5) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r6, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r7, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r11 = socket(0x2, 0x1, 0x0) getsockopt$auto(r11, 0x6, 0x25, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32, @ANYBLOB="0800050006000000110001006f76735f12fffe02fffe3f000200000008000200", @ANYRES32=0x0, @ANYBLOB="fbf973188e1c809b9fbd974f4c108dbb0b69c8ddfad28b9d959a76705d33670b421c20005f70589628f710de200894c444aced85d4d65b8b548d4bd80ba566fae89975cff3cca2a819da0d37e38d7231fccca75aeffb7a3065f59d928fefec715d4122103bc7f7c2b7160f62632a7a1a0ef6fe93d8d7169c8be1b411bf4c66e438f9201e019699feb8b5494e2aa05bda0d6aaabc7dff42adb619d190671c742083163deb8363059cec28a1f63e86066c8466685fba735c4772ee"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000240), r2) 1m54.926999366s ago: executing program 2 (id=1514): unshare$auto(0x40000080) mmap$auto(0x100000000000000, 0xeb, 0x5, 0x11, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000000000000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty0\x00', 0x581902, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="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", 0xdd4) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r0, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1e, 0x7, 0x8000000000000000, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0xc, 0x0, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) 1m53.970514099s ago: executing program 2 (id=1518): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x0, 0x7, 0xdd36, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x10000000000003, 0x3739aae3, 0x2, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x0, 0x7, 0xdd36, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x10000000000003, 0x3739aae3, 0x2, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) (async) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x9}, 0x7, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x8640, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) settimeofday$auto(0xfffffffffffffffe, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000f9dbdf2501000000060002000000000005000700"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x2a, 0xffffffffffffffff, 0x3) vmsplice$auto(0xffffffffffffffff, 0x0, 0x6, 0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m52.897657405s ago: executing program 2 (id=1522): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000003c0)={{0x1, 0xfffffffe, 0x10001, 0x3}, 0x101, 0x4, 0x2, "1b2be85a6b6d7d3340b7aa99dad2fe2d68f658f3bf0b9c0500"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r3, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) ioctl$auto(r5, 0x8912, 0x38) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r4) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 1m37.668142107s ago: executing program 32 (id=1522): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000003c0)={{0x1, 0xfffffffe, 0x10001, 0x3}, 0x101, 0x4, 0x2, "1b2be85a6b6d7d3340b7aa99dad2fe2d68f658f3bf0b9c0500"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r3, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) ioctl$auto(r5, 0x8912, 0x38) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r4) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 1m22.16069834s ago: executing program 3 (id=1643): ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000080)="8ce968f6d33e1d1a4f6a2f12f470f8cdb7dfeaf02768589362668247de44a359e8d9c13d4e52cc42ef43f1d4c965d3d505ad05f2c97a5541863adc5154e4028bdf351c0900000421cd3d73083f859a25a8b713916bb90e14883914f1b33ebd88ce433cff55ac") ioctl$auto(0xffffffffffffffff, 0xc08c5102, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) linkat$auto(r0, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) socket(0x26, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xfffffffffffff001, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0x1, 0xa, 0x0, 0x1}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0x8) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) 1m21.816590365s ago: executing program 3 (id=1646): munmap$auto(0x200000008000, 0xffffffff) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) socket(0xa, 0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r3, 0x7, 0x6}, 0x4, 0x100000) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r5, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x80) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_wireguard(0x0, r0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1m20.804438546s ago: executing program 3 (id=1652): close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(0x0, 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0xff, 0xffffffff, 0x2}, 0x8003, 0x0, 0x6) fremovexattr$auto(r0, &(0x7f0000000000)='system.posix_acl_access\x00') 1m20.569930535s ago: executing program 3 (id=1654): ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000080)="8ce968f6d33e1d1a4f6a2f12f470f8cdb7dfeaf02768589362668247de44a359e8d9c13d4e52cc42ef43f1d4c965d3d505ad05f2c97a5541863adc5154e4028bdf351c0900000421cd3d73083f859a25a8b713916bb90e14883914f1b33ebd88ce433cff55ac") ioctl$auto(0xffffffffffffffff, 0xc08c5102, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) linkat$auto(r0, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) socket(0x26, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xfffffffffffff001, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0x1, 0xa, 0x0, 0x1}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0x8) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) 1m20.127169635s ago: executing program 3 (id=1658): r0 = getpid() r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0x0, "72e00d838b24ff6fd5411f4330fd8fa23cf2b9541bbae501c8312f5733753466"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x20008011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf25210000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008000300fdffffff08000300030000000800030005000000340001800800030007000000080003000f00000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480001800800030001000080080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006e72300000000000000000000000000008000300000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f62617461647600080003000500000088000180140002007465616d3000000000000000000000001400020064756d6d79300000000000000000000008000300b30000000800030002000000140002007665746831000000000000000000000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176644c31000008050300556100005400018008002800", @ANYRES32=0x0, @ANYBLOB="080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200677265746170300000000000000000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e3000000000000008000300dd97ffff140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x244}}, 0x41) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) timer_settime$auto(0x0, 0x519a, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x100) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x401000000000004}, 0x3) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MPATH(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x7c0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}, @NL80211_ATTR_FRAME={0x775, 0x33, "c0dc5cb2075900f9387c980c9bef6d064ae6006877eaa3f5ff1628d1f4d5dc805acd5834415b0f71aec7a7e2da606ed67fe9d0fc5ada4071477757409c8e99eeba8360800101b7701d833c83dda98dea66e7fd511bf556d527ef00335eb7aab8265a91589712f756aa614eab8f14c1c68528c5aef44327b3b134c7ceea833b9fcc6be401f644d3a15c28dc73c807e7f026fdf5f93b07b546b013b9bf6679b0ba6732fb118002a87e1cc1ee0c6fda3265dc79530b1d20e3fb52727998e57cd3c7db891002195d8a5f4d8603d7a94b15ba3f21090785fe91e75ea8f50be4c8f41f9d94d1cdfedc724e20d35e21705662a03a4200f7331ee566f74d0bd9c08ab339bbad4b8c680dcaad05096487f682f13ecbacce4776fcd5fbfcd7787eb1d1a59e57bc7a856d0d49319034aeddcd45ea42b4261ea3a27923999cd762d384f35b8a466bf276395c28b5cb71879d1ecda7139b1bf7e74f52f895c7cf4e0d8ddaed54e67263dc20de7b1196e52684341703917bd80a30d578ccd63f10caf084137a274727db5f946879fd4dc80dcb378fa71ea9f967bfc6e0c3fc70692e87f76031e559e7d3791946de12ea2f43a0a81040e53ff925620af9e5c6a0a19a29a2e8039dc0f17920cec24274d865a1c89fa6d87ecbae7ee8615277541a30403880985f06ec3024584a3b81dadc05435f1a2158c5c9873a57e4fa2a0d41ac9f6486c9c29c51d21167aca71708ab1df9fed73322e05d070d7d9bf97974918d693d4fd628057df304936731af42f495fda97491eafc28722728e21fa971da1163c7c6247754a65f2f6b8125c181608e3ad584f41e9f659da8c0245b441b6231ef237d666b68f0f7ceff40504b301260dbe9fdfae0373ae6dadbc7c4d47a28bfb61b5911975d5fd30d4b8be5e97a9de7f2a450f3eaf91018243539d5dac174a508aa59d07e62a2097a69c17d51e080acec0c31854a97cd5738ee6f701c0501eb63a15752c86740d152bd75014f8f27ef4c293e63af88c586a06d63f675f3a8a0348b4cda46a4eab0af752d35f4d47df7a4093f67898604e22a605fff8131ed95c4aad9cadcbff8c498bb5a8d7846cf2fb90f3fb92e9f15a4de2e878fa26a7b25b6df7aabfafd696e0926da2659c6fa946413886491672786fb8991f9190eebeaa0e27269b18791fa3f2604546dc9443832d31e29c5b296a756628a668cb9ce6b68fa5f382dda4db02a10cdee084924c6b9e5a66fa43614bf3f44fc164c47088adf8dbaa29937f4b46b48e911f665afd69c846144544c837d77afc5af7f865200bb7797ab7d3064028e5d92628aa633fc42277800e4197e99f1cabbb91318afceba7ae61fd9310a313459cceb82b2eb286f97b95be344404a01283542d78fa0f1dfd13cb88af7afa1e534d6ddf3c3bbb66b6b1bf4f9ef9e52707656f031643dac7e9b6a714ce26dd75b43a73e126b6131366dba1ab01cb91e27a2b43f5319e86a595bf84256ef918ec4acf0c9037bcf1dee55865329c6abe8566b79527b74f73bcce4abe86a7d984cde45c413d3f5142e4abb03ca2e7a0ecb5124202e62ae75e39db99de1c51684a70e0209a26f38d7c769402d82188ae25a2ec60a476299d68d0408bcce7422291852a675ac5940dd0533531ea49fc1aa1cdd4e679282d076129e63a9d898faabb3e9f8d58730df158cd53f6bb64be2ce0dc3b2b9d67dedd72220c08ee368d4114c99311a07e925788bb7b774c6571417e50cfc1da065aa71a143c8a950b943174d958c0e1fbd757693962fc526b29a0fd3d71f09b19e6868c460c43b99569bf818bb31f4a7d0b11129b8af21b4091a3aa6c5cbb4c3441456c4d38ebf8381f0ed0cdb9ca404cf7b08349397bea7ca1c7531fc28a266bdac1b03a83a30ccf714765b5e83a06d26f86b9c450c4b346f6e5fc2ac3e454545c18bd9d92486e08a263ea786abb1987532de2ff3dc72cb80dbbb63d69692ac0dea5d8da6e4eb287f82f9ec8108ec630e5d2e3aa08d6c4d369ca825a1e49f8eba442a7de7a6bccf2c30bce942e1a2d55cc609a9e6bc8c6e8b2fa20215745f6140fe4b7d86357898919893f91d91a1c21fa2b39008c72f321a7c9350909548674ef2b05718715a0efe4bc8832df50d140515800d26a50cfd9d3dc08ffc5b3c8da50f75320a2edb4257169d9e3169819457d165aaecd8c51fb2d435e9e377ea07c0807fcba39ecffae6134b6eff92b636762f3dc65b8ceaa3c7c13aee3411df7c93706de706d050499e7abd5a66d30596297962876fc42e29bb9667e6d1b474d1d163a4e938af7e9817dc45bb06547d58b0a6f2c246933e36fc4444654a3beb05b25d9c388aeb1fc9ba116a7f0fc75f9527dd074be32d3715ee2b6a4f57fa5b67d80598fa1f4c75d6cbcee8876a65f87284ce737439eb71eb493bfc0d0e62100584d2aaa663849d52850fd6b1041e16ce9918c6b5beb3b7912373f2c1bf28d8035cf62fb899c596a3554495e6f60541a2a72cf7e3ab3716f9cfa968a6d195888fe57c281e71cf7da5f848f0aa87d1e36c6dba9c4b7276e5272526246151eb3fff812ef4856a7abc2ef4c320ce1bfd7ed42d390c36831865260efdf8576b1d331ce1e7d1818f04dda3e6df0fd07b43319cf10a030317cbf702e4ae4e947a6f84a4fe913ec24caa5d84c5b4af2218c55c4483e28d5d99596487b25283"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_SAR_SPEC={0xc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6}]}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2003f0, 0x11) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) 1m19.216936117s ago: executing program 3 (id=1660): msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x3, 0x0, 0x10000006, 0x3}, 0x0, 0x0, 0x1000000000008, 0xb, 0x10, 0x205, 0x5b73, 0x49, 0x9, 0x8}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x0, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast1}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(r1, 0x0, 0x6) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, 0x0) ioctl$auto_SNDCTL_SEQ_RESET(r3, 0x5100, 0x0) r4 = socket(0xa, 0x2, 0x73) sendto$auto(r4, 0x0, 0x402, 0x1, &(0x7f0000000000)=@nl, 0x1c) r5 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) r6 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000180)=0x2) r7 = socket(0x1d, 0x3, 0x1) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r7) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c043200", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="5401b880ff3687a71ebf7de4a05a685102a3864b642eb6085bd841d415fcc7e5b9ada12afb5d1d629087203e70a97470a6105da3977bfe2cd0a5251fcc7f6ed48ccef486ed61bfd7b9bc4de17c9a9baadd83f1686fd43aa9f80a754d3c60495f866046b5ed1928c7170a40281c097f05a91d57c8d4bd8d42638ce94ad197b890aa36345a51f49dd4a67834e2e7600e03252ee278c8a118fc7764e46acb1dc42e976f583344b2dec689681980883a10b191040a8c27c861b49101c921b0f9aeae489e0ea6a7af12cd43b82c8b5c69b06866f6519d6dec6d7242091f34c440375a403fd1251153ede4e8a44c4f30c9503d7db73e281c7c5f0b306111e450594256d097f299e241ca6221f2e1144e9552c06a299201b1e7fff86f6d99dfc4b824b1f5a49945d4da394a90c429929b77aa8cd2290a40113ad85676dcf650f692fcb31c892521a0b0bb0e214d0f0b0311894b04003e80080082000d0000009ea9eb9d6a3eebef87cc13ae5ee827e1070df34780a2ea219f88768810a278186fd02821ff78982268264b13bce94a2abfd3702d028f84e039467d9533a444e3701cdd537d22e707b7ca4f2e93fd2d34a1642133db9470ce3f8c174cf56574b27e222825db40cf70faf864ed1ae3e6c9e697bcf12e9d0db983e9d1af5b7f2fc62c4f5ce530a58e3938daddf2c9881afa33f484aef3f49500625c29fab84f0bbfdb214c7201307c04c3b37e27259c9e7418d2a99953f04ea9a1489ceabe8b2b8d254fa835c86c8e4ef555356bb2e622ebdabe0597af4295e35cd3fc9fb529bbdf59eed421c31f0217324bade9e467f784b77a9f31844a4cedafe54ce12f8994e13801b5027bb577a29bd7514de97126c92a0d13b25c969729b746d9e69eea024959f7560b0c3c4ed39629dbdcb5bcfce3404a7c26bd4c623b51f24204f30d5df64f9468dd6ecce63273498b6ff7d41542c294a815b0bd1646f9100b72980800f700", @ANYRES32=r7, @ANYBLOB], 0x41c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bind$auto(r7, 0x0, 0x1) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000300)={0x8, 0x5, [{r4, 0x0, 0x7, 0xc}, {r5, 0x0, 0x10000, 0xd}, {r6, 0x0, 0x0, 0x1}, {r0, 0x0, 0x9, 0x81}, {r0, 0x0, 0x4c4b, 0xffffffffffffffff}, {r7, 0x0, 0x80, 0xd8}, {r0, 0x0, 0x0, 0x10}, {r0, 0x0, 0x8001, 0x10}, {r0, 0x0, 0x6, 0xfffffffffffffffe}]}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/net_prio.prioidx\x00', 0x20a42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000001080)=""/4076, 0xfec) ioctl$auto(0x3, 0x80000541b, 0x38) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) 1m4.03084112s ago: executing program 33 (id=1660): msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x3, 0x0, 0x10000006, 0x3}, 0x0, 0x0, 0x1000000000008, 0xb, 0x10, 0x205, 0x5b73, 0x49, 0x9, 0x8}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x0, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast1}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(r1, 0x0, 0x6) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, 0x0) ioctl$auto_SNDCTL_SEQ_RESET(r3, 0x5100, 0x0) r4 = socket(0xa, 0x2, 0x73) sendto$auto(r4, 0x0, 0x402, 0x1, &(0x7f0000000000)=@nl, 0x1c) r5 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) r6 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000180)=0x2) r7 = socket(0x1d, 0x3, 0x1) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r7) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c043200", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x41c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bind$auto(r7, 0x0, 0x1) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000300)={0x8, 0x5, [{r4, 0x0, 0x7, 0xc}, {r5, 0x0, 0x10000, 0xd}, {r6, 0x0, 0x0, 0x1}, {r0, 0x0, 0x9, 0x81}, {r0, 0x0, 0x4c4b, 0xffffffffffffffff}, {r7, 0x0, 0x80, 0xd8}, {r0, 0x0, 0x0, 0x10}, {r0, 0x0, 0x8001, 0x10}, {r0, 0x0, 0x6, 0xfffffffffffffffe}]}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/net_prio.prioidx\x00', 0x20a42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000001080)=""/4076, 0xfec) ioctl$auto(0x3, 0x80000541b, 0x38) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) 1m0.224333072s ago: executing program 1 (id=1734): timerfd_create$auto(0x9, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000080)={&(0x7f0000000040)='f', 0x69}, 0x1, 0x0, 0x8, 0x3}, 0x6}, 0x2, 0x100) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x20480, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x3, 0x7f) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x6, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x5, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 58.973463s ago: executing program 1 (id=1736): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) read$auto(r0, &(0x7f0000000400)='/pD\xf9\xb1Tz\xd6\xab\xaa^SBroc/\x9e8\f\xd1\xd6be\xc1^\xb5\xbb,\xa4\xa3\xa7\xfb\xc0\x92\x1aF\x96\x11\x9d\x0f\xfc\xf3\xa9\xe8\xfa\xb2y\xc5\x17fuD\xedpU,\xeb[\xe9@Vs\x9f\xd4\xb2\xd15A\\\xd4\xf4!\xcf4j\x04bs\xed\xab\xb8\xfb\xd7\a\xee\xd6|\xbc`\xe4dUF^\xa5\xc3\xd0\xe9K\xe0LmI\x98V\xbf-%B\x14i\x01\xa7\x9b\x84\'r\xd02\xd4\x87\x8b\xa1\xe6\xb0gl6\xb2\x02\xbbR\x80\x9c\x98i\xb7\x04m\n\x13+\x91\x84\x18`\xc6\xd5{)\x1cTx', 0x7fffffff) socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) r2 = memfd_create$auto(0x0, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) mmap$auto(0x0, 0x200, 0xdd, 0x13, 0x2, 0x8800) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80302, 0x0) ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r2, 0x5382, &(0x7f0000000300)="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") ioctl$auto_SW_SYNC_IOC_INC(r4, 0x40045701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x2100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r5 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/oss\x00', 0x101000, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000000240)={@padding, 0xfe}) socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x371c7de76b69ab03, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x400008fd6, 0x948b, 0x4000000000003, 0x15f4da0b, 0x2, 0x3, 0x62, 0x80000001, 0x5, 0x2, 0x7, 0x200004, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000540)='/\xa3ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee;\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x04\x03.\xe1\r\x93\xdd\xcaC:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.@Z5`\xa4m\xffb\x17\xbb\x03\x8a\x0fH\x82\xc5\xff\x0e\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf6f\xb8&\x959-\n\xccWw\xe2\x9cK\f\x00\xeb\xb4\xf6\x12\x99\xae\x12m\xaa^\xa0\x9bE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccR\xa6\x12\xc52\xb96\xec\xdf:\xd2L\xcd%C\xd0\x9b\xa2\xd5\x83\xcf\xc9\xc9\xef}5\xfe\a]\xc4\xeak\x03\x94\xb3\xb5\xef\xed}\x17|\xa89T\xa4\x8b\xa1\xb8\x85f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r2, 0x0, 0x2) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) 37.342858709s ago: executing program 5 (id=1809): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)={0x7}) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES8=r1], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x301102, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x2, 0x5, 0x4, @inferred, @integer64={0x8, 0x0, 0xf}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) 36.152862659s ago: executing program 5 (id=1812): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80240, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x9487, 0x445f, 0x15f4da0a, 0x1, 0x3, 0x280, 0x100, 0x4, 0x38f, 0xfffffffffffffffd, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x642, 0x0) mq_notify$auto(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0) write$auto(0x3, 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/device_strs\x00', 0x580, 0x0) timer_create$auto(0xfffffffa, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x5, 0x2, 0x0, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyxf\x00', 0x4000, 0x0) symlink$auto(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch$auto(r1, 0x0, 0x200) getdents$auto(0xffffffffffffffff, 0x0, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) memfd_create$auto(0x0, 0x4) fsopen$auto(0x0, 0x20000) 35.792041636s ago: executing program 5 (id=1814): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="0000005ce1fe3112ea10", 0xfffffe2c) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) read$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 35.595108029s ago: executing program 5 (id=1815): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/cpu/vulnerabilities/itlb_multihit\x00', 0x103200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) (async) r1 = socket(0x2, 0x3, 0x100) getsockopt$auto_SO_NO_CHECK(r1, 0x0, 0xb, &(0x7f0000000040)='/dev/usbmon7\x00', &(0x7f0000000080)=0x2) listmount$auto(&(0x7f0000000100)={0x1f, @inferred=r0, 0x80, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) prctl$auto_PR_SET_MM(0x23, 0x618a, r2, 0x54, 0x6) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r3 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x110, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xe9, 0xc5, "26a658b5ac563ff78ccf745ec2829b3495490543596b124db4cbb28baadff6ace70c99f2ea8a0f1cce04245b21826c4a361bd1d3a9ee8e19c6dd41079eb646a09590ffbafda875f4677e13c231978d8ce1d13f875303a4fc794c63a20211742977002c17e806368343aa9600ad47096d78e47af3e5f5654c3640f95627b1adcbf37ceef0d3bf71fad40cdbfd096d56a8a3725c89257f17f68b6e2d161f1838df0d5de1baba0a775b2e8749b96ba41eb96a86ed988957b551c90ed06746a73f3d1098bd5db62a0e8212182f5b068539bb0ee4841ef8d3c6e2aed8d9e5d3573ead3f9d6d7fc8"}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x6}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket(0x11, 0x3, 0x9) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe540) (async) read$auto(0xffffffffffffffff, 0x0, 0x3cde) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="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", 0xfe04) (async) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000040)="a2020ca94fe96fd65f1f3096096bf8bf40fde1639fa0522cbc82cf928355d9fd9da46725c9eed654acb2e10cdf3bacf9da873066b05fb68435901d8b6b278a06f970120717909b59dfa4073a1a06ebcd828e1c7fd2085b1ff8") memfd_create$auto(&(0x7f0000000140)='!\x00', 0x16) fallocate$auto(0x8000000000000003, 0x1, 0xd, 0x2cbd58) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002dbd70db2bfb00f9dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r5) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd0100fddbdf251900000018000180140002006d6163766c616e3000000000000000003c0007800800010005000000080001000600004008000100ff0100000800010005000000080002000000000008000100ff00000008000100"], 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) (async) socket(0x200000000000011, 0x2, 0x0) 34.737799236s ago: executing program 5 (id=1818): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") 34.530493111s ago: executing program 5 (id=1819): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/nfc/nfc1/rfkill1/persistent\x00', 0x80000, 0x0) pread64$auto(r0, 0x0, 0x4000000800e, 0x3) semget$auto(0x0, 0x13c, 0x1ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_UNREGISTER_NAPI(r1, 0x1c, 0x0, 0x4000080) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) r2 = memfd_secret$auto(0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r4, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.net/blkio.bfq.weight\x00', 0x8001, 0x0) write$auto(r5, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000340)={{@inferred=r3, 0x8, 0x6e08b25d, 0x23, "348a6097046683b273e10662ee72fcae1606943b3df548a7600e5a1c7c86e3d0bea4eb2275c58c3c4d5ca531", @inferred=r3}, 0x1, @bytes=@data="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", "a2f34e74f8c55bda7347b9bb1d806856fddd11ea2421f37c3d34ecd12f9724b15a23759b53e1bd27fb8302c8550c87014de9441cb6cede65a523b834e8476d77454a8d82ff529d46e49cb24f32e0f2b4af0602ae8cf82501ed78f6bbe979ed75203f141b80f9212bf8cefed773e548b8b11bd861608f3815746404cc75c93f18"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/cuse/power/runtime_status\x00', 0x604002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b41", 0x7) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) ioctl$auto_BLKPG(r8, 0x1269, 0x300) socket(0xa, 0x2, 0x88) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)=@raw_tracepoint={0x3, r2, 0x0, 0x9}, 0x0) r9 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) bpf$auto(0x6, &(0x7f0000000280)=@bpf_attr_11={0x7f, 0x64, 0x7, 0x1ff, 0x1, 0x8, 0x10, r9}, 0xa3) write$auto(r2, &(0x7f0000000000)='\\&\'/{\x00', 0xe3) 32.478238697s ago: executing program 34 (id=1776): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r2, 0x0, 0x2) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) 28.681826422s ago: executing program 4 (id=1844): timerfd_create$auto(0x9, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000080)={&(0x7f0000000040)='f', 0x69}, 0x1, 0x0, 0x8, 0x3}, 0x6}, 0x2, 0x100) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x20480, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x3, 0x7f) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x6, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x5, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 27.495571035s ago: executing program 4 (id=1847): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mmap$auto(0x3, 0x5, 0xe0, 0x9b72, 0x2, 0x8000) ioctl$auto_SOUND_MIXER_READ_CAPS2(r0, 0x80044dfc, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) 27.11620763s ago: executing program 4 (id=1848): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80240, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x9487, 0x445f, 0x15f4da0a, 0x1, 0x81, 0xf8bd, 0x100, 0x4, 0x392, 0xfffffffffffffffd, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x642, 0x0) mq_notify$auto(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0) write$auto(0x3, 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/device_strs\x00', 0x580, 0x0) timer_create$auto(0xfffffffa, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) 26.150321036s ago: executing program 4 (id=1850): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b53", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c800) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) socket(0xa, 0x3, 0x3b) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r3, 0x7) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x74c) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) (async) mmap$auto(0x0, 0x7, 0xe4, 0x9b72, 0x2, 0x400) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) (async, rerun: 64) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="84130000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="6121710bc55be8b70b58759407f4e66f58a83e04a51a34177e0543a5abb315fbc06d885ef17750fda9a0b3f721a9c86543c4ef655c27362c988fa1de2104e1f3f946a77381dfd7dbd3a3c918b2eaae193636777c7c8c385b410ff5caa437f2c2ba4120b0b4273e53a9c990eb", @ANYRES32=0x0], 0x1384}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x4, 0x9, 0x4, 0x9, 0xf, @raw=0x9}) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 25.629554983s ago: executing program 4 (id=1851): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x10009, 0x6, 0x400001, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x120000, 0x7, 0x2d7d01bf, 0x105, 0x101, 0x7, 0x0, 0x8, 0x10000000000, 0xfffffffc, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x200000000000, 0x0, 0x2, 0x8, 0x5fec, 0x0, 0xfffffffffffffffc, 0x10000000000, 0xa, 0x8, 0x80000001, 0x400000000000000, 0xffffffffffffffff, 0xffffffffffbfffff, 0x0, 0x100000000003, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x800081, 0x0, 0x0, 0x100000000, 0x7, 0x0, 0x35, 0x0, 0x2, 0x8000006, 0x0, 0x0, 0x1000]}, 0x1fe, 0x533) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r0, 0x814}, 0x0) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0) ioctl$auto_FITHAW(r1, 0xc0045878, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) unshare$auto(0x40000080) socket(0x27, 0x5, 0x80) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x7, 0x0, 0x401, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x69a}) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/config/target/dbroot\x00', 0x7df2425d7faa8eb2, 0x0) socketpair$auto(0x9, 0x10, 0x5, &(0x7f0000000540)=0x80) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)=""/4096, 0x1000) pread64$auto(0xffffffffffffffff, 0x0, 0x10, 0xfffefffffffff72f) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 23.732003069s ago: executing program 4 (id=1854): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r2, 0x8, 0x0) brk$auto(0xffffffffffffff66) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mmap$auto(0x0, 0x2020009, 0xb47, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chown$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0x4, 0xa911, r1, 0x7ffd) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) 19.276608183s ago: executing program 35 (id=1819): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/nfc/nfc1/rfkill1/persistent\x00', 0x80000, 0x0) pread64$auto(r0, 0x0, 0x4000000800e, 0x3) semget$auto(0x0, 0x13c, 0x1ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_UNREGISTER_NAPI(r1, 0x1c, 0x0, 0x4000080) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) r2 = memfd_secret$auto(0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r4, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.net/blkio.bfq.weight\x00', 0x8001, 0x0) write$auto(r5, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000340)={{@inferred=r3, 0x8, 0x6e08b25d, 0x23, "348a6097046683b273e10662ee72fcae1606943b3df548a7600e5a1c7c86e3d0bea4eb2275c58c3c4d5ca531", @inferred=r3}, 0x1, @bytes=@data="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", "a2f34e74f8c55bda7347b9bb1d806856fddd11ea2421f37c3d34ecd12f9724b15a23759b53e1bd27fb8302c8550c87014de9441cb6cede65a523b834e8476d77454a8d82ff529d46e49cb24f32e0f2b4af0602ae8cf82501ed78f6bbe979ed75203f141b80f9212bf8cefed773e548b8b11bd861608f3815746404cc75c93f18"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/cuse/power/runtime_status\x00', 0x604002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b41", 0x7) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) ioctl$auto_BLKPG(r8, 0x1269, 0x300) socket(0xa, 0x2, 0x88) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)=@raw_tracepoint={0x3, r2, 0x0, 0x9}, 0x0) r9 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) bpf$auto(0x6, &(0x7f0000000280)=@bpf_attr_11={0x7f, 0x64, 0x7, 0x1ff, 0x1, 0x8, 0x10, r9}, 0xa3) write$auto(r2, &(0x7f0000000000)='\\&\'/{\x00', 0xe3) 7.570143586s ago: executing program 36 (id=1854): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r2, 0x8, 0x0) brk$auto(0xffffffffffffff66) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mmap$auto(0x0, 0x2020009, 0xb47, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chown$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0x4, 0xa911, r1, 0x7ffd) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) 5.877115889s ago: executing program 0 (id=1887): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) ioctl$auto_SOUND_MIXER_READ_CAPS2(r0, 0x80044dfc, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0xf, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) 5.291319372s ago: executing program 0 (id=1890): mmap$auto(0x7, 0x2400008, 0xb, 0x16, 0xffffffffffffffff, 0x4000000000008000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x40140, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40a100, 0x0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0x2, 0x0) semctl$auto(0x2, 0xff, 0x1, 0x7ff) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) socket(0x28, 0x1, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto(r1, &(0x7f0000000200)={&(0x7f0000000480)="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", 0x7, &(0x7f0000000140)={&(0x7f0000001480)="cb0900a1f88dd2bdd631cec9f2768a8a16d345a111fcba2fde98108ecb6c3813632a9bdc20a7e301ce458cf2d56aaf2754299a24a8ba1f2be862768974d4e0c8906787b88b83986d544de3583128d964e6526dffcf2ed809a30a0683b15471b70eb91bdf6ca832eb21a73995602917c7d557692329694a6727a0102743c32188ea51afe43092c1b9a67a74ce929e0f24262639d5d09c2bdc547d1d5ce5a3f1cc6ffdd4668e84c20327f99ee26a7bc33324d55b03269ea17a5c55f4a10ea292f628b1fe9eed10d4bd116b3d54c43e2340fd1a69ad680940870d48dd35", 0x1e1}, 0x2, &(0x7f0000000300)="bf6ebe6aac19590bcf8a34bdabd53a0b472cbd4eefb591866de44211b3ec2c1e50ff421fcfe03668d4dfb88c3963233d057a90c67ccb960aca5a18318f776654222caac88de6814adf04a4b4727ec55cb7575cadd72ff194486cb6435c66eadf3cfa42885995be57a08806b43e27ac5376c26d003695b116594a10bffa15bfcdea997148ca7d45d802591817d2628df26fe784496874a6819c5a0e172553dde1c580ae4f97d22eed544c0fd8bb8de6c949", 0x4db, 0x8}, 0x12) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x8001, &(0x7f0000000080)={&(0x7f00000003c0)="86b6ac823615940b7c9a511cd0342cc990863c956314b71b587863c713fae3bdcd8a12c878a882fb76b77ff478b24b8826622c751c7b9883471317b8ed909ccb5c3c7d437fa45a8eb47871d3aee5c969ccae159ae602e3cc98293bd7619a5b2c73eb521b65762648c99db0b263e0ea20ea4a8c4325e1cad72781f74e8398e4d85004944f558bcd", 0x6}, 0x0, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.026138769s ago: executing program 7 (id=1869): bind$auto(0x3, &(0x7f0000000080), 0x6b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000500)='/proc/lockdep_stats\x00', 0x400, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/119, 0x77) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffae, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x6cc31ef15fcd919c) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyp8\x00', 0x0, 0x0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080), 0x6b) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x20004004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) listen$auto(0x3, 0x81) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/tracing/uprobe_profile\x00', 0x40001, 0x0) semget$auto(0x0, 0x13c, 0x1ff) r2 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@siginfo_0_0={0x1, 0x1, 0xe, @_sigfault={&(0x7f00000000c0)="604dc0486a1241435cc4418d7b5a2c053c0cb1f3ef4b40b7abd3a31e086baa9502652423e987c7a7e4c51d5a3bf2ee82dba9eb57496da6f333d3c2a3d8100ba04d83c817730a1c12fbad7be9893b485b531fcb85a2bf86e1226c8ec5c80ed098f1a7c689b0e29be12df36cd0d694bbaf15ac3e4ded3a74351c5ddeef7d7978c40ea456ee74521b4690200a7fe631b39c896fda847471", @_addr_lsb=0x4}}}, 0x4, &(0x7f0000000180)={{0x1ff, 0x3ff}, {0xfffffffffffffffc, 0x8}, 0x100000000, 0x3, 0x1, 0x0, 0x10000, 0x100000000, 0x1, 0x7, 0x2, 0x6, 0x7fffffffffffffff, 0x6, 0x3, 0xd10c}) move_pages$auto(r2, 0x80, &(0x7f00000002c0)=&(0x7f0000000240)="6f14a8f8c0f812964d57af51deec77318891be9f6f41db0d82f60a6b9d459323b0ed6293422a64b968c34fd4803eafbaecb13ac9ac5f3c08a2e3bcc106257a5adb757f", &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x8, 0x795) 4.583508383s ago: executing program 6 (id=1892): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000001, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x7, 0x2, 0x9, 0x5, 0x1, 0x7, 0xb3, 0xc, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb0b}, 0x1fe, 0x81) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) write$auto(r0, &(0x7f00000005c0)='nfs4\x00', 0x18b9) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy3/rc/name\x00', 0x10040, 0x0) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b0, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x800}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x174, 0x2f, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @fd=r0}, @nested={0x2e, 0x137, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xc0}, @nested={0x4, 0x13a}, @generic="8c93e9dfb7c4a319f4ccd88b82c99a91563d1670612714d08301"]}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x200}, @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@loopback}, @nested={0xd4, 0x90, 0x0, 0x1, [@typed={0x1f, 0x10f, 0x0, 0x0, @binary="f43db5e95d1d1fda456b18fcd42e1cd4a447cb1fe2d1bece3a7333"}, @nested={0x4, 0xbb}, @generic="4debab6f303be6e84fa64be18c129e2046555426d5001bfa665120a7cf61b1fb09bcedc29267814d8632d042657d82c4b682fc130fc9d739d0b821f008240836161b32121d85b8f3e69d1b5f2d7ca91508bcc9fde1fd07606bf5e2e75f909969ec333916c8eae76b1aab99e5e74fc69f96fa91dbf1e45991c9fb9cc9", @typed={0x9, 0xd0, 0x0, 0x0, @str='nfs4\x00'}, @typed={0x8, 0x58, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x12f}, @typed={0x4, 0x2c}, @typed={0x14, 0x96, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x40, 0x8b, 0x0, 0x1, [@generic="52391dc2525caceeff150b8e7d2242cf7a5434483e46bc5caa8fec6f97613e30ebd70357d1c5b8d0daf1fb348b4a2f1e", @typed={0x8, 0x9e, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x9c}]}]}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a80)=ANY=[@ANYBLOB="30800800", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf251e00000018000180140002006e657464657673696d3000000000000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) 4.35192178s ago: executing program 7 (id=1893): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0xc, 0x0) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 4.178524992s ago: executing program 6 (id=1894): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0x25800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/vmwgfx/new_id\x00', 0xa001, 0x0) r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r0, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0x6) write$auto(0x3, 0x0, 0xfdef) 3.3553604s ago: executing program 0 (id=1895): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xefb7e034af661498}, 0x5df7968dd150bec7) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x70) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8004000}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 3.308998975s ago: executing program 6 (id=1896): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpgrp(0xffffffffffffffff) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) pread64$auto(r1, 0x0, 0x682c3390, 0xcff) prctl$auto(0x1000000003b, 0x1, r0, 0x3, 0x2a) statmount$auto(0x0, 0x0, 0x81, 0x968c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) epoll_create1$auto(0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x108402, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae9a, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4188aec6, 0x38) write$auto(0xca, &(0x7f0000000000)='\x0462\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r0, 0x6, 0xffffffff) socket(0xa, 0x3, 0x3a) 2.175237185s ago: executing program 6 (id=1897): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0x5, 0x1200, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = socket(0x1d, 0x3, 0x1) bind$auto(r1, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x42080, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x18, 0xac, "90cc85dda9d6c8dc692b5a21c1cf3a17525683c2"}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804) getpid() sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)={0x494, r3, 0x100, 0x70bd28, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_SERVICE={0x480, 0x1, 0x0, 0x1, [@nested={0x46c, 0x64, 0x0, 0x1, [@typed={0x9d, 0x7, 0x0, 0x0, @binary="80899bb9e7507db2570aa4b9a855977a1653bfef072c909422d4eac072e4b9ece399a88f55a4d2ee8b0f84a816e49a8392487672748bcd920493db5f535fee9828463f28df2ff9ff83538c12e36bcdb72441f34fb30f12fe27de7b42ed903ee5dc09bb5c5d2162e4b4759bb0a21e69641f14c638b8e76f9fc539bbe5bfbd4dc5376172711bebce068645269a2f9b1d85b4e23cd4bef7c0c1ae"}, @nested={0xe1, 0x9c, 0x0, 0x1, [@generic="6587a1fb830fe271126fbb0d9176d5bdc40d1cb0656350cb5a46af0456eb3b1f5cad58048b2dda14adae3a44d4a423ce6e3aa9f7898c42473d2f714d36092c10b128365632271aa6effa690448cd70c71c428b7aa1afdd020004550c51923094cdf219efff29376cecf9b64acbc5a57bbfd7b51d253fd3cc822d779dfaa876f86ddeea040055b5888fe24480e7b31480195b960da6fcf561a0268b38626f46c1b4833fe80eb66570f277c0c8ea704df5a8b2b32151da8a326a795ae83932b4117dfcb2931f01826bf6c68241cce32db313fa40816e", @typed={0x8, 0xaf, 0x0, 0x0, @u32=0x800}]}, @typed={0x1c, 0x140, 0x0, 0x0, @str='/dev/gadgetfs/dummy_udc\x00'}, @nested={0x1e3, 0x48, 0x0, 0x1, [@generic="a754e76b263f4f72c2523b35231facc4f71059ef9b44c7ec6c46db59685d0ee390148f8aab1be481562e66448c284ea2d5513d972db49bef6338b6e50fc57ddaecfdd6cd83d7c8ac1aa511f6a32c4324b7d767f6", @nested={0x4, 0xa4}, @typed={0x4, 0x141}, @generic="9e3c192179117e311d1c2f86d915cce99acf085503a6d94ce49b5a4a561b47268c862080e0bf38abb4f26408096b4683eb5a959f7624da6af4f2fdf197880a296cdc6e5d7d5a06e5eb2083137c9c648568a6c525312875aea330b64488f34bdbdbd8779bfeaca7a78dc455957ffc30d44264885b76bc19f13a99e86313c49686d3d86d442f22cdf4711b39e9e8b2f0a7f29f462abb8345fb0b95d08eb75be53841d77ab39cb1c4fd90e440c8ff7fff24e5a98136db6ca61b65465facf470f14f5dcbb4cc9f6b9791682c8e23076b3b3314371aa1e810f910c51d6a5bab761ff95562f6", @nested={0x4, 0x87}, @generic="9e58eec79519b4bb2586b56f23bad379f6cb4b353796b3ba9ecf5132caa8673932515c1dac98ce61a4d0825d24af5aac3ec363951daf0aa8a976fbbc7e97f2e7cdd08537aa73cb109fbc0c959921979808cfe34bc8fd39622ca7e921154d71a90cdfabb46333f59c49ba6aafc47e2b58a02e2a79f5e576c07341bf29a2292593ddcda7503ed73c5bb76e857e2568402e5d3ea54281be6dfa709d8138"]}, @generic="e229ca44ecdefa24646407a63082818baba236597c25f1679c5d57db9ae2fe06ec7774be1560478611f8a1c92bb78484687d298cacbfb4699a24ab4fa64e3be792674c1ea87c2a80a1caa4ef95a54a0e903f499f5644501d2aff1d73e1c0883631bbd2d3d0bf68f6dc2408133af438e31fda33dbf50d23839499ff38495e2411afcc8b65fcf847c71ef3081ce6fe66e6ec4c80e54eb470694e5c492285282f168c10b0c2c0014cd5b91f7456fee963224ab21d5f120b9f74b12b4c8d627fa76948813ec1ed2211be129905b3898bca85f12ae68150252322cf36985e4d34ada4d504c6da"]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xa, 0x4b, 0x0, 0x1, [@generic="b69338fc3930"]}]}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x4050}, 0x240400c0) r7 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r7, &(0x7f00000001c0)=""/132, 0x84) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x800, 0x1, 0x948b, 0x3, 0x95f4da2d, 0x20d, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) shutdown$auto(0x200000003, 0x2) 2.041561329s ago: executing program 7 (id=1898): r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r3) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) ioctl$auto(r5, 0x7000, 0xffffffffffffffff) socketpair$auto(0x6, 0x4, 0x0, &(0x7f0000000280)=0x81) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010b2732ba4cdfdbdf24fefffff8080003007828c52cf2b66a5d47c0", @ANYRES32=r6, @ANYRESDEC=r2, @ANYRES8=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40448a4}, 0x9800) timer_create$auto(0x2, 0x0, &(0x7f0000000140)=0x6) timer_delete$auto(0x0) sendmsg$auto_BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fddbdf2510000000080039000500000005002d00010000000a001000aaaaaaaaaa1800000a001800e17d6c13f1de00000800170007000000050033000b0000000a000500aaaaaaaaaabb000004001600"], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r7) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010426bd7000fbdbdf25030000001800018014000206000000000000000000000000706421fc05000200000000007d504894c98f6aab935b25274ac07ef781b4af0d4e0318a1a0ed3093fede1017b49fc035f48337f4843c15ceb8b149675ef563e7e7454162a96dc809fd43cd7021729dfb384ec20d0fa2e96ccf5af406049087fb25850e"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) r9 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r1) msgctl$auto_IPC_INFO(0x40, 0x3, &(0x7f00000003c0)={{0x8000, 0xffffffffffffffff, 0x0, 0x8, 0x6, 0x3, 0x7d1}, &(0x7f00000002c0)=0xb, &(0x7f0000000300)=0x10, 0x0, 0x100000000, 0x5, 0x876, 0x8, 0x9, 0xffff, 0xfff7, @raw=0xc05, @raw=0x3}) r11 = setfsuid$auto(0xee00) r12 = setfsuid$auto(0xee01) setresuid$auto(r11, r12, r11) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f00000004c0)={{0x4, 0x0, 0xee01, 0x7, 0x1, 0x0, 0x6}, 0x2, 0x4, 0x1000, 0x101, @raw=0x1ff, @raw=0x3, 0x5, 0x0, &(0x7f0000000340)="031e9893c037a9a7f83e3e45a94982d179699ee0a7a8c7fcc4f2634f7e73fdf84b8306e3c9a3a2e0b5b6151fff6f70a426", &(0x7f0000000440)="decf288f7e218d40e64c18615cc0aa1bc3c2b4776f398645eba83517026e3f9f4a220894de41ac61a747daabe36c398024094d337ce7f8eec765eaa0a03cc5c502ca0c918c246575c3f8387cadbe613b2f25d683a98765a7c8cc2ed76524a8466d54e39a8e990b74410e3f869a66b939aa0bce595e1167bcb5d74a80cd"}) keyctl$auto(0x9, r10, r11, r13, 0x9) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002540)={0x10ec, r9, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x54, 0x4, "02cf939c9e73a153c0b06698c7f89ca9ebe285812ddbb69e80950cf4f16157938c9be7fbc176fe7dff29e02b710b01b5873b7828de6d5bd606170b7e1a2bd96e4df67844f4ce1d0d636568caaf910590"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACINFO={0x1069, 0x7, 0x0, 0x1, [@typed={0x1004, 0x82, 0x0, 0x0, @binary="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"/4096}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r1}, @generic="4adbc83973189fc5cbe8cecb36601db39549e6331ea2e452e6f9ba554438c52159f6b41d79a11f32c36bb5ed47519f5dcc33c0c1b4b8be70cc830063d9162853f6ac2c67117346f6b2b13bcade", @typed={0xc, 0x53, 0x0, 0x0, @u64=0x1a4}]}]}, 0x10ec}, 0x1, 0x0, 0x0, 0x24000014}, 0x2400c810) recvmmsg$auto(r1, &(0x7f0000000800)={{&(0x7f0000001480)="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", 0x3e, &(0x7f0000000640)={&(0x7f0000000540)="45786c2e708ed7a1d022cc12d2fbb5944c5c01645535ba03a20d6cc0d43698ee7bb6aca102b761ce87d29546585e129189e2bd035a7176f513b9c22c2aeb3e85f4e3433c8c3477919fa936567e1ebfdb5c13894912fc58a422633bd699fa49ad0642313b01c87b8870d2b55c8e975bd1a6a3c7fc799a8977ad9c0b55fa344dbd0086321970943ca19c54508f7c8435d61a2b00179b41bef2ae3e54a36da3206540ddfb1e8faf6ed5c4a9c96d5bb22d59b9478e96afc4ac7f5ac6ce38f5408bfdc8afe14316189af84438f3d8", 0x7}, 0x8000, &(0x7f0000000700)="1e8c04ea795e3d3c335b353735a515bdebcd38a2fb9e19cde2ec492cd5fbcb01c1ca9a971150b1abf4388b83b186130e8538273a50255bc0af7001d4745af602a6428e5dbfd29b40d1fcf3", 0xdb, 0x6}, 0x4}, 0x97, 0x3, &(0x7f0000000840)={0x0, 0x7f}) 1.843064203s ago: executing program 0 (id=1899): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="0000005ce1fe3112ea10", 0xfffffe2c) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) read$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1.759216964s ago: executing program 7 (id=1900): r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd12\x00', 0x8001, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram0/queue/dma_alignment\x00', 0x8800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x4) writev$auto(0x3, 0x0, 0x8009) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) mmap$auto(0xffffffffffffffff, 0x4020007, 0x1, 0xbd, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sched_setaffinity$auto(0xffffffffffffffff, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) read$auto(0x3, 0x0, 0xf34) write$auto(r2, 0x0, 0xb3) ioctl$auto(r1, 0x5380, 0xffffffffffffffff) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000100)='1', 0x1) 1.340143303s ago: executing program 7 (id=1901): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x2, 0xd, 0xfffffffffffffffb, 0x100000004, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) (async) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) (async) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) read$auto_hwsim_fops_ps_(r3, 0x0, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) (async) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) (async) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) 1.105348008s ago: executing program 6 (id=1902): seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfffffffc, &(0x7f0000000180)) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40044620, 0x0) (async) mmap$auto(0x400000000, 0x2020009, 0x3, 0xeb1, r0, 0x8002) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x8911, 0x24) madvise$auto(0x437, 0x8, 0x9) semctl$auto_GETPID(0x800, 0xc2e, 0xb, 0x60000000) socket(0x1e, 0x80f, 0x17ea) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) semctl$auto(0xa, 0x2, 0x13, 0x21) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x5) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b72", 0x25) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) 1.092504503s ago: executing program 0 (id=1903): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', 0x0, 0x0, 0x8002, 0x200) ioctl$auto_SOUND_MIXER_READ_CAPS2(r0, 0x80044dfc, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) 526.899696ms ago: executing program 0 (id=1904): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) readv$auto(0x3, &(0x7f0000000080)={0x0, 0x8}, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.0/status.15\x00', 0x40000, 0x0) read$auto(r1, 0x0, 0x9) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_page_alloc/space\x00', 0x240, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/corrected_bits\x00', 0x540, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) read$auto(0x3, 0x0, 0x80) 256.13822ms ago: executing program 7 (id=1905): close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) setrlimit$auto(0x8, 0x0) io_uring_setup$auto(0x52, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) ioctl$auto(r1, 0x8004510b, 0x3) clone$auto(0x8, 0x4, &(0x7f0000000280)=0x6, &(0x7f00000002c0), 0x9) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) mmap$auto(0x0, 0x22009, 0x3, 0xeb1, r3, 0x8003) setsockopt$auto(r2, 0x8, 0xfffffffa, &(0x7f0000000300)='/dev/sequencer\x00', 0xfffffff9) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/tracing/set_event_pid\x00', 0x2002, 0x0) sendmmsg$auto(r4, &(0x7f0000000340)={{&(0x7f0000000380)="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", 0x9, &(0x7f0000000100)={&(0x7f00000001c0)="33b4ff896be30097c89cfcb3b8f57d7f104e7bec52479733b76db2e43fc3dc0458223ce3bf94b83596c32f1848690ed1f263a6ebbf0ab57e301b9c2864cbd61997f9edb96c467f5579de1d2a0a86f58546828bbf726d76b9e2cdaf7413eb0bffb605dfa5b886d79ad9419ec59438ef22aba67b7374cbc77aa2409e89dfa7a623a4feaf1fd64ee2d0ab48e38b1cc4855c6aecf136ccbd250ac4ae2188503c4b65dcc34da51fee9a08d4da90540387b5ed5586f0d8f94cd9e6a000", 0x7}, 0x7, &(0x7f0000001200)="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", 0x3, 0x8000}, 0x7}, 0x0, 0x0) read$auto(r3, 0x0, 0x35cb) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0xff, 0xffffffff, 0x2}, 0x8003, 0x0, 0x6) fremovexattr$auto(r0, &(0x7f0000000000)='system.posix_acl_access\x00') 0s ago: executing program 6 (id=1906): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x10, 0x2, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(r1, 0xae41, r2) (async, rerun: 32) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x3f1, 0x400}]}) socket(0x26, 0x6, 0x3) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x40000000000a5, 0x8000) (async) r3 = getsid$auto(0x0) (async) r4 = pidfd_open$auto(0xffffffffffffffff, 0x9) setns(r4, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) (async) r5 = pidfd_open$auto(0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) msgctl$auto_IPC_SET(0x8, 0x1, &(0x7f0000000280)={{0x2, 0x0, 0x0, 0x4, 0x7, 0x4}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x2, 0xb, 0x8, 0x8, 0x81, 0x10000, 0x9, 0x40, 0x0, @inferred=r3, @raw=0xa}) (async) msgctl$auto_MSG_STAT(0x8, 0xb, &(0x7f0000000340)={{0x7, 0xee01, 0xee01, 0x800, 0x8001, 0x8, 0x101}, &(0x7f0000000180)=0x7, &(0x7f0000000300)=0x5, 0xbf, 0x6, 0x3, 0x6, 0x385, 0x0, 0x0, 0xffff, @raw=0x6, @inferred=r3}) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80150000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25360000000400e20081004f0039b680c3bff1f6a3512e64358922f88df4e6dd5acc00ced995c79d3c09bcf84c683c0d7910cbdd49c6e1aa12655d4a6d6398e11870db8c3710c68f648e441a107495f3e98e5e4fabc6fc629a082e1faae5cf6768d1bcd6f2b2aff6fbad0bb3e2058f36c7e72f41daf9a0465af4dc0e1899f0b2292206bae1bb5a7b0a51000000b71475801c01008008001c00", @ANYRES32=r3, @ANYBLOB="040037800400f200e5000c005c0e48ced76ba9c5a3614a49a4c6b3a229952fd747b8e095e9993f4724ae36b223397d8da40fbf3e227fa8d131412d628857bab199aafa160af5492e1a72c917921a85956bb2ad79f0bb3840e32c1623f667c4d2344bdae923f39ad5ab9128945ce33a6efb8beb50cf0a2f9b90edf2a2108202e3957e60ceb4621c2ab8d6b130eabee3f4206d9474db2a9a7d8521b203b954fe0f70b34a13111cb6457cf591c5ea5db3f70f7a8f235203cf509e40536794475389db0d00b1d832ec7bcb36b922d0950420077f92608916efdf26d769ec624034b4474e06e7c869383704819374080000000400398008005400", @ANYRES32=r4, @ANYBLOB="0c000000020000000000000008004000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x1580}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) socketcall$auto(0xffe, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) pidfd_open$auto(0x1, 0x0) kernel console output (not intermixed with test programs): 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.199383][ T9319] RSP: 002b:00007fe9d68bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 314.199406][ T9319] RAX: ffffffffffffffda RBX: 00007fe9d5be5fa0 RCX: 00007fe9d598f7c9 [ 314.199422][ T9319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 314.199436][ T9319] RBP: 00007fe9d5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.199450][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.199464][ T9319] R13: 00007fe9d5be6038 R14: 00007fe9d5be5fa0 R15: 00007fff85384d28 [ 314.199495][ T9319] [ 314.799813][ T9327] netlink: 504 bytes leftover after parsing attributes in process `syz.3.733'. [ 314.908345][ T9329] bond0: invalid ARP target specified [ 315.420036][ T9204] mkiss: ax0: crc mode is auto. [ 317.166774][ T9362] futex_wake_op: syz.3.738 tries to shift op by -2048; fix this program [ 317.507598][ T9375] FAULT_INJECTION: forcing a failure. [ 317.507598][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 317.774547][ T9375] CPU: 0 UID: 0 PID: 9375 Comm: syz.2.739 Not tainted syzkaller #0 PREEMPT(full) [ 317.774580][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.774593][ T9375] Call Trace: [ 317.774601][ T9375] [ 317.774610][ T9375] dump_stack_lvl+0x16c/0x1f0 [ 317.774643][ T9375] should_fail_ex+0x512/0x640 [ 317.774694][ T9375] _copy_from_user+0x2e/0xd0 [ 317.774733][ T9375] move_addr_to_kernel+0x65/0x170 [ 317.774768][ T9375] __sys_connect+0xb1/0x160 [ 317.774803][ T9375] ? __pfx___sys_connect+0x10/0x10 [ 317.774848][ T9375] ? __pfx_ksys_write+0x10/0x10 [ 317.774881][ T9375] __x64_sys_connect+0x72/0xb0 [ 317.774917][ T9375] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.774946][ T9375] do_syscall_64+0xcd/0xfa0 [ 317.774977][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.775001][ T9375] RIP: 0033:0x7fe9d598f7c9 [ 317.775019][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.775041][ T9375] RSP: 002b:00007fe9d689b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 317.775062][ T9375] RAX: ffffffffffffffda RBX: 00007fe9d5be6090 RCX: 00007fe9d598f7c9 [ 317.775078][ T9375] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 317.775092][ T9375] RBP: 00007fe9d689b090 R08: 0000000000000000 R09: 0000000000000000 [ 317.775106][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.775119][ T9375] R13: 00007fe9d5be6128 R14: 00007fe9d5be6090 R15: 00007fff85384d28 [ 317.775149][ T9375] [ 320.146718][ T9424] netlink: zone id is out of range [ 320.228947][ T9424] netlink: zone id is out of range [ 320.264950][ T9424] netlink: del zone limit has 8 unknown bytes [ 320.307291][ T9425] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 320.360968][ T9427] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 321.037354][ T9440] netlink: Unknown conntrack attr (type=257, max=9) [ 321.161556][ T9441] Invalid ELF header magic: != ELF [ 322.723023][ T9473] zswap: compressor not available [ 323.134057][ T9481] FAULT_INJECTION: forcing a failure. [ 323.134057][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 323.381399][ T9481] CPU: 0 UID: 0 PID: 9481 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(full) [ 323.381432][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.381447][ T9481] Call Trace: [ 323.381455][ T9481] [ 323.381464][ T9481] dump_stack_lvl+0x16c/0x1f0 [ 323.381498][ T9481] should_fail_ex+0x512/0x640 [ 323.381536][ T9481] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 323.381564][ T9481] should_failslab+0xc2/0x120 [ 323.381597][ T9481] kmem_cache_alloc_noprof+0x75/0x6e0 [ 323.381622][ T9481] ? __kernfs_new_node+0xd2/0x8e0 [ 323.381659][ T9481] ? __kernfs_new_node+0xd2/0x8e0 [ 323.381689][ T9481] __kernfs_new_node+0xd2/0x8e0 [ 323.381725][ T9481] ? __pfx___kernfs_new_node+0x10/0x10 [ 323.381764][ T9481] ? find_held_lock+0x2b/0x80 [ 323.381790][ T9481] ? kernfs_root+0xee/0x2a0 [ 323.381827][ T9481] kernfs_new_node+0x13c/0x1e0 [ 323.381869][ T9481] __kernfs_create_file+0x53/0x350 [ 323.381898][ T9481] sysfs_add_file_mode_ns+0x207/0x3c0 [ 323.381935][ T9481] sysfs_merge_group+0x1aa/0x340 [ 323.381996][ T9481] ? __pfx_sysfs_merge_group+0x10/0x10 [ 323.382034][ T9481] ? __pfx_dev_add_physical_location+0x10/0x10 [ 323.382082][ T9481] ? bus_to_subsys+0x131/0x160 [ 323.382111][ T9481] dpm_sysfs_add+0x237/0x280 [ 323.382151][ T9481] device_add+0x9a6/0x1aa0 [ 323.382193][ T9481] ? __pfx_device_add+0x10/0x10 [ 323.382231][ T9481] ? lockdep_init_map_type+0x5c/0x280 [ 323.382266][ T9481] ? __init_waitqueue_head+0xca/0x150 [ 323.382296][ T9481] rfkill_register+0x1ad/0xb40 [ 323.382323][ T9481] nfc_register_device+0x11f/0x3c0 [ 323.382357][ T9481] nci_register_device+0x7f1/0xb80 [ 323.382382][ T9481] ? __pfx_nci_register_device+0x10/0x10 [ 323.382411][ T9481] ? lockdep_init_map_type+0x5c/0x280 [ 323.382451][ T9481] virtual_ncidev_open+0x141/0x220 [ 323.382479][ T9481] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 323.382506][ T9481] misc_open+0x26d/0x450 [ 323.382544][ T9481] ? __pfx_misc_open+0x10/0x10 [ 323.382580][ T9481] chrdev_open+0x234/0x6a0 [ 323.382610][ T9481] ? __pfx_apparmor_file_open+0x10/0x10 [ 323.382648][ T9481] ? __pfx_chrdev_open+0x10/0x10 [ 323.382679][ T9481] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 323.382713][ T9481] do_dentry_open+0x982/0x1530 [ 323.382742][ T9481] ? __pfx_chrdev_open+0x10/0x10 [ 323.382778][ T9481] vfs_open+0x82/0x3f0 [ 323.382817][ T9481] path_openat+0x1de4/0x2cb0 [ 323.382854][ T9481] ? __pfx_path_openat+0x10/0x10 [ 323.382883][ T9481] ? __lock_acquire+0xb8a/0x1c90 [ 323.382919][ T9481] do_filp_open+0x20b/0x470 [ 323.382946][ T9481] ? __pfx_do_filp_open+0x10/0x10 [ 323.382995][ T9481] ? alloc_fd+0x471/0x7d0 [ 323.383028][ T9481] do_sys_openat2+0x11b/0x1d0 [ 323.383072][ T9481] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.383120][ T9481] __x64_sys_openat+0x174/0x210 [ 323.383158][ T9481] ? __pfx___x64_sys_openat+0x10/0x10 [ 323.383208][ T9481] do_syscall_64+0xcd/0xfa0 [ 323.383241][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.383265][ T9481] RIP: 0033:0x7fc29458f7c9 [ 323.383284][ T9481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.383307][ T9481] RSP: 002b:00007fc2953ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 323.383330][ T9481] RAX: ffffffffffffffda RBX: 00007fc2947e5fa0 RCX: 00007fc29458f7c9 [ 323.383346][ T9481] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 323.383361][ T9481] RBP: 00007fc294613f91 R08: 0000000000000000 R09: 0000000000000000 [ 323.383375][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.383390][ T9481] R13: 00007fc2947e6038 R14: 00007fc2947e5fa0 R15: 00007fffc1d330f8 [ 323.383422][ T9481] [ 326.527184][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 326.839803][ T9355] mkiss: ax0: crc mode is auto. [ 326.971753][ T9532] netlink: 338 bytes leftover after parsing attributes in process `syz.1.782'. [ 327.118640][ T9536] netlink: 314 bytes leftover after parsing attributes in process `syz.1.782'. [ 327.133290][ T9519] Process accounting paused [ 327.870400][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.877321][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.500841][ T9566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.682217][ T9569] zero sized request [ 328.748296][ T9566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.025815][ T9566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.102149][ T9566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.360222][ T9578] netlink: 342 bytes leftover after parsing attributes in process `syz.1.791'. [ 330.382988][ T9594] binder: 9593:9594 ioctl 5380 200000000440 returned -22 [ 330.438178][ T9595] vhci_hcd: vhci_device speed not set [ 330.444454][ T9594] sd 0:0:1:0: PR command failed: 1026 [ 330.481034][ T9594] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 330.511490][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 330.595287][ T9594] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 330.826284][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 331.066437][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 331.146455][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 331.723290][ T9619] netlink: 338 bytes leftover after parsing attributes in process `syz.1.800'. [ 331.905547][ T9617] netlink: 338 bytes leftover after parsing attributes in process `syz.1.800'. [ 332.294749][ T9626] Unable to find swap-space signature [ 333.086394][ T9629] zswap: compressor not available [ 333.270741][ T9641] zswap: compressor  not available [ 334.445863][ T9666] mkiss: ax0: crc mode is auto. [ 337.373397][ T9718] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 337.447744][ T9718] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 337.455670][ T9718] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 337.542265][ T9718] netlink: 'syz.1.821': attribute type 2 has an invalid length. [ 337.594940][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 338.631712][ T9738] kernel read not supported for file /\*)A (pid: 9738 comm: syz.2.825) [ 338.715442][ T9741] capability: warning: `syz.0.826' uses 32-bit capabilities (legacy support in use) [ 338.726001][ T30] audit: type=1800 audit(4294975283.542:7): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.825" name="\*)A" dev="mqueue" ino=12536 res=0 errno=0 [ 342.296974][ T9797] netlink: 302 bytes leftover after parsing attributes in process `syz.0.839'. [ 343.136450][ T9806] delete_channel: no stack [ 344.304542][ T9813] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 346.128674][ T9690] mkiss: ax0: crc mode is auto. [ 347.317596][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 347.382674][ T9859] netlink: 186 bytes leftover after parsing attributes in process `syz.0.853'. [ 351.420053][ T9913] binder: 9912:9913 ioctl c018620c 0 returned -22 [ 351.537432][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 352.650059][ T10] Process accounting resumed [ 354.809418][ T9967] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 354.893148][ T9967] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 354.925810][ T9967] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 355.005580][ T9967] netlink: 'syz.0.879': attribute type 2 has an invalid length. [ 355.066337][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 355.782831][ T9989] netlink: 342 bytes leftover after parsing attributes in process `syz.1.884'. [ 357.401054][ T9987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 357.437511][ T9987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 357.471557][ T9987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.499651][ T9987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 357.562824][ T9852] mkiss: ax0: crc mode is auto. [ 357.613769][T10019] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8164ee9a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 357.631402][T10019] Call Trace: [ 357.634740][T10019] [ 357.637730][T10019] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 357.645253][T10019] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.651310][T10019] ? mark_held_locks+0x49/0x80 [ 357.656348][T10019] mce_cpu_restart+0xd9/0x1f0 [ 357.661087][T10019] ? __pfx_mce_cpu_restart+0x10/0x10 [ 357.668006][T10019] smp_call_function_many_cond+0x122a/0x1600 [ 357.674751][T10019] ? __pfx_mce_cpu_restart+0x10/0x10 [ 357.680953][T10019] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 357.687402][T10019] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.693389][T10019] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 357.699859][T10019] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 357.706304][T10019] ? __pfx_mce_cpu_restart+0x10/0x10 [ 357.712166][T10019] on_each_cpu_cond_mask+0x40/0x90 [ 357.717331][T10019] set_bank+0x240/0x3a0 [ 357.721580][T10019] ? __pfx_set_bank+0x10/0x10 [ 357.726342][T10019] ? find_held_lock+0x2b/0x80 [ 357.731426][T10019] ? __pfx_set_bank+0x10/0x10 [ 357.736177][T10019] dev_attr_store+0x58/0x80 [ 357.740740][T10019] ? __pfx_dev_attr_store+0x10/0x10 [ 357.745992][T10019] sysfs_kf_write+0xf2/0x150 [ 357.750693][T10019] kernfs_fop_write_iter+0x3af/0x570 [ 357.756356][T10019] ? __pfx_sysfs_kf_write+0x10/0x10 [ 357.761760][T10019] vfs_write+0x7d3/0x11d0 [ 357.766306][T10019] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 357.773154][T10019] ? __pfx___mutex_lock+0x10/0x10 [ 357.779038][T10019] ? __pfx_vfs_write+0x10/0x10 [ 357.784240][T10019] ksys_write+0x12a/0x250 [ 357.788721][T10019] ? __pfx_ksys_write+0x10/0x10 [ 357.793618][T10019] do_syscall_64+0xcd/0xfa0 [ 357.798160][T10019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.804178][T10019] RIP: 0033:0x7fc29458f7c9 [ 357.808712][T10019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.828345][T10019] RSP: 002b:00007fc2953ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.837258][T10019] RAX: ffffffffffffffda RBX: 00007fc2947e5fa0 RCX: 00007fc29458f7c9 [ 357.845273][T10019] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 357.853298][T10019] RBP: 00007fc294613f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.862093][T10019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.870658][T10019] R13: 00007fc2947e6038 R14: 00007fc2947e5fa0 R15: 00007fffc1d330f8 [ 357.879841][T10019] [ 357.883371][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.993030][ T9987] Process accounting resumed [ 358.455143][T10035] netlink: zone id is out of range [ 358.504117][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 359.466306][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 359.472380][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 359.547039][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 359.710342][T10023] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.891' sets config #0 [ 361.536729][T10083] netlink: 314 bytes leftover after parsing attributes in process `syz.0.902'. [ 362.375646][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.904'. [ 362.641969][T10097] bond0: (slave bond_slave_1): Releasing backup interface [ 362.735767][T10099] FAULT_INJECTION: forcing a failure. [ 362.735767][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 363.026954][T10099] CPU: 0 UID: 0 PID: 10099 Comm: syz.2.905 Tainted: G I syzkaller #0 PREEMPT(full) [ 363.026992][T10099] Tainted: [I]=FIRMWARE_WORKAROUND [ 363.027000][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.027020][T10099] Call Trace: [ 363.027028][T10099] [ 363.027037][T10099] dump_stack_lvl+0x16c/0x1f0 [ 363.027071][T10099] should_fail_ex+0x512/0x640 [ 363.027107][T10099] ? __kmalloc_cache_noprof+0x5f/0x780 [ 363.027133][T10099] should_failslab+0xc2/0x120 [ 363.027167][T10099] __kmalloc_cache_noprof+0x72/0x780 [ 363.027190][T10099] ? do_raw_spin_unlock+0x172/0x230 [ 363.027212][T10099] ? snd_mixer_oss_open+0x11d/0x300 [ 363.027246][T10099] ? snd_mixer_oss_open+0x11d/0x300 [ 363.027274][T10099] snd_mixer_oss_open+0x11d/0x300 [ 363.027300][T10099] ? __pfx_snd_mixer_oss_open+0x10/0x10 [ 363.027330][T10099] soundcore_open+0x40c/0x580 [ 363.027362][T10099] ? __pfx_soundcore_open+0x10/0x10 [ 363.027391][T10099] chrdev_open+0x234/0x6a0 [ 363.027421][T10099] ? __pfx_apparmor_file_open+0x10/0x10 [ 363.027508][T10099] ? __pfx_chrdev_open+0x10/0x10 [ 363.027540][T10099] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 363.027574][T10099] do_dentry_open+0x982/0x1530 [ 363.027604][T10099] ? __pfx_chrdev_open+0x10/0x10 [ 363.027640][T10099] vfs_open+0x82/0x3f0 [ 363.027693][T10099] path_openat+0x1de4/0x2cb0 [ 363.027729][T10099] ? __pfx_path_openat+0x10/0x10 [ 363.027757][T10099] ? __lock_acquire+0xb8a/0x1c90 [ 363.027793][T10099] do_filp_open+0x20b/0x470 [ 363.027820][T10099] ? __pfx_do_filp_open+0x10/0x10 [ 363.027868][T10099] ? alloc_fd+0x471/0x7d0 [ 363.027899][T10099] do_sys_openat2+0x11b/0x1d0 [ 363.027935][T10099] ? __pfx_do_sys_openat2+0x10/0x10 [ 363.027985][T10099] __x64_sys_openat+0x174/0x210 [ 363.028021][T10099] ? __pfx___x64_sys_openat+0x10/0x10 [ 363.028070][T10099] do_syscall_64+0xcd/0xfa0 [ 363.028101][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.028125][T10099] RIP: 0033:0x7fe9d598f7c9 [ 363.028143][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.028165][T10099] RSP: 002b:00007fe9d68bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 363.028187][T10099] RAX: ffffffffffffffda RBX: 00007fe9d5be5fa0 RCX: 00007fe9d598f7c9 [ 363.028202][T10099] RDX: 0000000000000902 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 363.028217][T10099] RBP: 00007fe9d5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.028231][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.028245][T10099] R13: 00007fe9d5be6038 R14: 00007fe9d5be5fa0 R15: 00007fff85384d28 [ 363.028275][T10099] [ 363.950513][T10112] netlink: 342 bytes leftover after parsing attributes in process `syz.0.909'. [ 367.824761][T10166] FAULT_INJECTION: forcing a failure. [ 367.824761][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 367.881026][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.3.921 Tainted: G I syzkaller #0 PREEMPT(full) [ 367.881065][T10166] Tainted: [I]=FIRMWARE_WORKAROUND [ 367.881074][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.881088][T10166] Call Trace: [ 367.881095][T10166] [ 367.881103][T10166] dump_stack_lvl+0x16c/0x1f0 [ 367.881137][T10166] should_fail_ex+0x512/0x640 [ 367.881174][T10166] ? fs_reclaim_acquire+0xae/0x150 [ 367.881208][T10166] should_failslab+0xc2/0x120 [ 367.881241][T10166] __kmalloc_noprof+0xdd/0x880 [ 367.881262][T10166] ? kfree+0x252/0x6d0 [ 367.881280][T10166] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 367.881314][T10166] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 367.881342][T10166] tomoyo_realpath_from_path+0xc2/0x6e0 [ 367.881379][T10166] tomoyo_check_open_permission+0x2ab/0x3c0 [ 367.881403][T10166] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 367.881456][T10166] ? do_raw_spin_lock+0x12c/0x2b0 [ 367.881502][T10166] tomoyo_file_open+0x6b/0x90 [ 367.881535][T10166] security_file_open+0x84/0x1e0 [ 367.881562][T10166] do_dentry_open+0x596/0x1530 [ 367.881598][T10166] vfs_open+0x82/0x3f0 [ 367.881636][T10166] path_openat+0x1de4/0x2cb0 [ 367.881672][T10166] ? __pfx_path_openat+0x10/0x10 [ 367.881700][T10166] ? __lock_acquire+0xb8a/0x1c90 [ 367.881741][T10166] do_filp_open+0x20b/0x470 [ 367.881768][T10166] ? __pfx_do_filp_open+0x10/0x10 [ 367.881815][T10166] ? alloc_fd+0x471/0x7d0 [ 367.881847][T10166] do_sys_openat2+0x11b/0x1d0 [ 367.881889][T10166] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.881936][T10166] __x64_sys_openat+0x174/0x210 [ 367.881973][T10166] ? __pfx___x64_sys_openat+0x10/0x10 [ 367.882021][T10166] do_syscall_64+0xcd/0xfa0 [ 367.882053][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.882077][T10166] RIP: 0033:0x7fc29458f7c9 [ 367.882095][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.882117][T10166] RSP: 002b:00007fc2953ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.882139][T10166] RAX: ffffffffffffffda RBX: 00007fc2947e5fa0 RCX: 00007fc29458f7c9 [ 367.882154][T10166] RDX: 0000000000088000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 367.882169][T10166] RBP: 00007fc294613f91 R08: 0000000000000000 R09: 0000000000000000 [ 367.882183][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.882214][T10166] R13: 00007fc2947e6038 R14: 00007fc2947e5fa0 R15: 00007fffc1d330f8 [ 367.882244][T10166] [ 368.137490][T10166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.345255][T10041] mkiss: ax0: crc mode is auto. [ 369.790923][T10198] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 370.288703][T10199] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 370.993294][ T30] audit: type=1800 audit(4294975315.824:8): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.930" name="discovery_nqn" dev="configfs" ino=32396 res=0 errno=0 [ 371.280480][T10214] netlink: 342 bytes leftover after parsing attributes in process `syz.3.931'. [ 372.931117][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 373.007284][T10240] netlink: 'syz.0.939': attribute type 4 has an invalid length. [ 373.047859][T10240] netlink: 314 bytes leftover after parsing attributes in process `syz.0.939'. [ 373.105786][T10244] tc_dump_action: action bad kind [ 373.145425][T10240] IPv6: Can't replace route, no match found [ 374.677867][T10267] bond0: no command found in slaves file - use +ifname or -ifname [ 374.857632][ T30] audit: type=1800 audit(4294976342.682:9): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.946" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 375.249426][T10276] vhci_hcd: invalid port number 0 [ 375.300324][T10276] netlink: 338 bytes leftover after parsing attributes in process `syz.2.950'. [ 375.339021][T10278] netlink: 338 bytes leftover after parsing attributes in process `syz.2.950'. [ 376.105069][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 376.140359][T10289] veth1_macvtap: left promiscuous mode [ 379.608150][T10344] bond0: no command found in slaves file - use +ifname or -ifname [ 381.065928][T10206] mkiss: ax0: crc mode is auto. [ 382.198570][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ac14400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 382.280416][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.977'. [ 384.122673][T10427] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 384.385941][T10429] zswap: compressor not available [ 384.843778][T10430] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 386.789182][T10470] zswap: compressor not available [ 387.524180][T10495] FAULT_INJECTION: forcing a failure. [ 387.524180][T10495] name failslab, interval 1, probability 0, space 0, times 0 [ 387.593835][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz.3.1000 Tainted: G I syzkaller #0 PREEMPT(full) [ 387.593874][T10495] Tainted: [I]=FIRMWARE_WORKAROUND [ 387.593882][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.593895][T10495] Call Trace: [ 387.593902][T10495] [ 387.593910][T10495] dump_stack_lvl+0x16c/0x1f0 [ 387.593945][T10495] should_fail_ex+0x512/0x640 [ 387.593979][T10495] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 387.594007][T10495] should_failslab+0xc2/0x120 [ 387.594040][T10495] kmem_cache_alloc_noprof+0x75/0x6e0 [ 387.594064][T10495] ? security_file_alloc+0x34/0x2b0 [ 387.594094][T10495] ? security_file_alloc+0x34/0x2b0 [ 387.594118][T10495] security_file_alloc+0x34/0x2b0 [ 387.594143][T10495] init_file+0x93/0x4c0 [ 387.594176][T10495] alloc_empty_file+0x73/0x1e0 [ 387.594211][T10495] alloc_file_pseudo+0x13a/0x230 [ 387.594247][T10495] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 387.594290][T10495] __shmem_file_setup+0x1a3/0x330 [ 387.594331][T10495] shmem_zero_setup+0x93/0x1a0 [ 387.594359][T10495] __mmap_region+0x2076/0x27a0 [ 387.594387][T10495] ? __pfx___mmap_region+0x10/0x10 [ 387.594430][T10495] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 387.594508][T10495] ? trace_cap_capable+0x18d/0x200 [ 387.594579][T10495] mmap_region+0x1ab/0x3f0 [ 387.594603][T10495] ? __get_unmapped_area+0x267/0x440 [ 387.594638][T10495] do_mmap+0xa3e/0x1210 [ 387.594675][T10495] ? __pfx_do_mmap+0x10/0x10 [ 387.594706][T10495] ? __pfx_down_write_killable+0x10/0x10 [ 387.594747][T10495] vm_mmap_pgoff+0x29e/0x470 [ 387.594783][T10495] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 387.594827][T10495] ksys_mmap_pgoff+0x7d/0x5c0 [ 387.594856][T10495] ? xfd_validate_state+0x61/0x180 [ 387.594895][T10495] __x64_sys_mmap+0x125/0x190 [ 387.594934][T10495] do_syscall_64+0xcd/0xfa0 [ 387.594965][T10495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.594988][T10495] RIP: 0033:0x7fc29458f7c9 [ 387.595006][T10495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.595028][T10495] RSP: 002b:00007fc2953ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 387.595050][T10495] RAX: ffffffffffffffda RBX: 00007fc2947e6090 RCX: 00007fc29458f7c9 [ 387.595065][T10495] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 387.595080][T10495] RBP: 00007fc294613f91 R08: 0000000000000401 R09: 0000000000008000 [ 387.595094][T10495] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 387.595107][T10495] R13: 00007fc2947e6128 R14: 00007fc2947e6090 R15: 00007fffc1d330f8 [ 387.595138][T10495] [ 388.718710][T10496] Process accounting paused [ 389.326872][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.333541][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.519031][T10519] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 391.552958][T10550] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1014'. [ 392.275237][T10566] futex_wake_op: syz.1.1016 tries to shift op by -2048; fix this program [ 392.897065][T10390] mkiss: ax0: crc mode is auto. [ 394.734526][T10600] vivid-007: ================= START STATUS ================= [ 394.789596][T10600] vivid-007: Generate PTS: true [ 394.795088][T10600] vivid-007: Generate SCR: true [ 394.847345][T10600] tpg source WxH: 320x240 (Y'CbCr) [ 394.883728][T10600] tpg field: 1 [ 394.945582][T10600] tpg crop: (0,0)/320x240 [ 394.983452][T10600] tpg compose: (0,0)/320x240 [ 395.010601][T10600] tpg colorspace: 8 [ 395.039458][T10600] tpg transfer function: 0/0 [ 395.063439][T10600] tpg Y'CbCr encoding: 0/0 [ 395.092103][T10600] tpg quantization: 0/0 [ 395.129616][T10600] tpg RGB range: 0/2 [ 395.158517][T10600] vivid-007: ================== END STATUS ================== [ 395.265029][T10614] FAULT_INJECTION: forcing a failure. [ 395.265029][T10614] name failslab, interval 1, probability 0, space 0, times 0 [ 395.353539][T10614] CPU: 0 UID: 0 PID: 10614 Comm: syz.3.1027 Tainted: G I syzkaller #0 PREEMPT(full) [ 395.353578][T10614] Tainted: [I]=FIRMWARE_WORKAROUND [ 395.353586][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.353599][T10614] Call Trace: [ 395.353606][T10614] [ 395.353614][T10614] dump_stack_lvl+0x16c/0x1f0 [ 395.353673][T10614] should_fail_ex+0x512/0x640 [ 395.353708][T10614] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 395.353739][T10614] should_failslab+0xc2/0x120 [ 395.353771][T10614] kmem_cache_alloc_noprof+0x75/0x6e0 [ 395.353795][T10614] ? dup_fd+0x4e/0xb90 [ 395.353824][T10614] ? dup_fd+0x4e/0xb90 [ 395.353846][T10614] dup_fd+0x4e/0xb90 [ 395.353868][T10614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 395.353904][T10614] ? __fget_files+0x20e/0x3c0 [ 395.353931][T10614] ksys_unshare+0x831/0xa40 [ 395.353965][T10614] ? __pfx_ksys_unshare+0x10/0x10 [ 395.354003][T10614] ? ksys_write+0x1ac/0x250 [ 395.354038][T10614] __x64_sys_unshare+0x31/0x40 [ 395.354069][T10614] do_syscall_64+0xcd/0xfa0 [ 395.354100][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.354124][T10614] RIP: 0033:0x7fc29458f7c9 [ 395.354142][T10614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.354164][T10614] RSP: 002b:00007fc2953ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 395.354186][T10614] RAX: ffffffffffffffda RBX: 00007fc2947e5fa0 RCX: 00007fc29458f7c9 [ 395.354201][T10614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 395.354215][T10614] RBP: 00007fc2953ef090 R08: 0000000000000000 R09: 0000000000000000 [ 395.354229][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.354242][T10614] R13: 00007fc2947e6038 R14: 00007fc2947e5fa0 R15: 00007fffc1d330f8 [ 395.354273][T10614] [ 395.792501][T10616] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 397.118449][T10647] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 397.220929][T10648] sg_read: process 1100 (syz.0.1035) changed security contexts after opening file descriptor, this is not allowed. [ 399.676197][T10683] zswap: compressor not available [ 399.864829][T10686] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 400.015541][T10690] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 400.794587][T10704] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1048'. [ 400.804108][T10703] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 403.515641][T10759] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1059'. [ 403.675410][T10761] netlink: 'syz.2.1060': attribute type 15 has an invalid length. [ 403.715634][T10761] netlink: 'syz.2.1060': attribute type 16 has an invalid length. [ 403.757633][T10761] netlink: 194 bytes leftover after parsing attributes in process `syz.2.1060'. [ 403.780572][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 404.188571][T10583] mkiss: ax0: crc mode is auto. [ 406.510022][T10803] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 407.046670][T10808] netlink: 74 bytes leftover after parsing attributes in process `syz.1.1071'. [ 409.960061][T10869] netlink: 'syz.3.1087': attribute type 2 has an invalid length. [ 410.218086][T10875] FAULT_INJECTION: forcing a failure. [ 410.218086][T10875] name fail_futex, interval 1, probability 0, space 0, times 1 [ 410.296516][T10875] CPU: 0 UID: 0 PID: 10875 Comm: syz.2.1088 Tainted: G I syzkaller #0 PREEMPT(full) [ 410.296556][T10875] Tainted: [I]=FIRMWARE_WORKAROUND [ 410.296565][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.296579][T10875] Call Trace: [ 410.296587][T10875] [ 410.296596][T10875] dump_stack_lvl+0x16c/0x1f0 [ 410.296631][T10875] should_fail_ex+0x512/0x640 [ 410.296674][T10875] get_futex_key+0x1d0/0x1560 [ 410.296711][T10875] ? __pfx_get_futex_key+0x10/0x10 [ 410.296752][T10875] futex_wake+0xea/0x530 [ 410.296788][T10875] ? futex_wait+0x120/0x380 [ 410.296811][T10875] ? __pfx_futex_wake+0x10/0x10 [ 410.296855][T10875] ? aa_get_newest_label+0xd2/0x250 [ 410.296897][T10875] do_futex+0x1e3/0x350 [ 410.296934][T10875] ? __pfx_do_futex+0x10/0x10 [ 410.296976][T10875] __x64_sys_futex+0x1e0/0x4c0 [ 410.297014][T10875] ? __pfx___x64_sys_futex+0x10/0x10 [ 410.297057][T10875] ? xfd_validate_state+0x61/0x180 [ 410.297092][T10875] ? __pfx_ksys_write+0x10/0x10 [ 410.297128][T10875] do_syscall_64+0xcd/0xfa0 [ 410.297160][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.297185][T10875] RIP: 0033:0x7fe9d598f7c9 [ 410.297203][T10875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.297226][T10875] RSP: 002b:00007fe9d689b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 410.297248][T10875] RAX: ffffffffffffffda RBX: 00007fe9d5be6098 RCX: 00007fe9d598f7c9 [ 410.297264][T10875] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe9d5be609c [ 410.297279][T10875] RBP: 00007fe9d5be6090 R08: 00007fe9d68bd000 R09: 0000000000000000 [ 410.297294][T10875] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 410.297308][T10875] R13: 00007fe9d5be6128 R14: 00007fff85384c40 R15: 00007fff85384d28 [ 410.297339][T10875] [ 411.077861][ T30] audit: type=1400 audit(4294976378.884:10): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10892 comm="syz.2.1093" [ 411.129436][T10886] warning: `syz.3.1090' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 412.222355][T10916] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 412.983610][T10923] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 414.717553][T10960] usb usb15: usbfs: process 10960 (syz.3.1111) did not claim interface 0 before use [ 414.876688][T10960] Invalid ELF header magic: != ELF [ 415.354573][ T30] audit: type=1800 audit(4294976383.162:11): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="dbroot" dev="configfs" ino=36638 res=0 errno=0 [ 415.375647][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.457531][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1116'. [ 415.548488][T10783] mkiss: ax0: crc mode is auto. [ 415.695507][T10984] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1118'. [ 415.733647][T10983] zero sized request [ 416.816220][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1127'. [ 417.479770][T11039] program syz.1.1131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.077075][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'. [ 420.273072][T11082] vivid-003: ================= START STATUS ================= [ 420.308376][T11082] vivid-003: Radio HW Seek Mode: Bounded [ 420.331493][T11082] vivid-003: Radio Programmable HW Seek: false [ 420.365099][T11082] vivid-003: RDS Rx I/O Mode: Block I/O [ 420.392851][T11082] vivid-003: Generate RBDS Instead of RDS: false [ 420.420836][T11082] vivid-003: RDS Reception: true [ 420.449962][T11082] vivid-003: RDS Program Type: 0 inactive [ 420.514464][T11082] vivid-003: RDS PS Name: inactive [ 420.549007][T11082] vivid-003: RDS Radio Text: inactive [ 420.583498][T11082] vivid-003: RDS Traffic Announcement: false inactive [ 420.663318][T11082] vivid-003: RDS Traffic Program: false inactive [ 420.729754][T11082] vivid-003: RDS Music: false inactive [ 420.751353][T11082] vivid-003: ================== END STATUS ================== [ 421.755168][T11091] Invalid ELF header magic: != ELF [ 421.893318][T11090] delete_channel: no stack [ 422.766083][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1147'. [ 423.050457][T11108] FAULT_INJECTION: forcing a failure. [ 423.050457][T11108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.148748][T11108] CPU: 0 UID: 0 PID: 11108 Comm: syz.2.1148 Tainted: G I syzkaller #0 PREEMPT(full) [ 423.148788][T11108] Tainted: [I]=FIRMWARE_WORKAROUND [ 423.148797][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.148811][T11108] Call Trace: [ 423.148819][T11108] [ 423.148828][T11108] dump_stack_lvl+0x16c/0x1f0 [ 423.148862][T11108] should_fail_ex+0x512/0x640 [ 423.148905][T11108] should_fail_alloc_page+0xe7/0x130 [ 423.148941][T11108] prepare_alloc_pages+0x3c2/0x610 [ 423.148979][T11108] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 423.149013][T11108] ? find_held_lock+0x2b/0x80 [ 423.149039][T11108] ? is_bpf_text_address+0x8a/0x1a0 [ 423.149074][T11108] ? bpf_ksym_find+0x124/0x1c0 [ 423.149101][T11108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 423.149127][T11108] ? is_bpf_text_address+0x94/0x1a0 [ 423.149162][T11108] ? kernel_text_address+0x8d/0x100 [ 423.149184][T11108] ? __kernel_text_address+0xd/0x40 [ 423.149206][T11108] ? unwind_get_return_address+0x59/0xa0 [ 423.149243][T11108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 423.149286][T11108] ? policy_nodemask+0xea/0x4e0 [ 423.149322][T11108] alloc_pages_mpol+0x1fb/0x550 [ 423.149356][T11108] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 423.149389][T11108] ? kasan_save_stack+0x33/0x60 [ 423.149416][T11108] ? kasan_save_track+0x14/0x30 [ 423.149443][T11108] ? __kasan_kmalloc+0xaa/0xb0 [ 423.149469][T11108] ? __get_vm_area_node+0x101/0x330 [ 423.149516][T11108] alloc_pages_noprof+0x131/0x390 [ 423.149551][T11108] get_free_pages_noprof+0x10/0xb0 [ 423.149585][T11108] kasan_populate_vmalloc+0x9f/0x2d0 [ 423.149612][T11108] ? alloc_vmap_area+0x8b5/0x29e0 [ 423.149648][T11108] alloc_vmap_area+0x960/0x29e0 [ 423.149692][T11108] ? __pfx_alloc_vmap_area+0x10/0x10 [ 423.149732][T11108] __get_vm_area_node+0x1ca/0x330 [ 423.149771][T11108] __vmalloc_node_range_noprof+0x271/0x1480 [ 423.149809][T11108] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 423.149840][T11108] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 423.149869][T11108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 423.149915][T11108] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 423.149937][T11108] vmalloc_user_noprof+0x9e/0xe0 [ 423.149972][T11108] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 423.149995][T11108] vb2_vmalloc_alloc+0x135/0x3f0 [ 423.150018][T11108] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 423.150040][T11108] __vb2_queue_alloc+0x8c9/0x1280 [ 423.150092][T11108] vb2_core_reqbufs+0xa90/0xfe0 [ 423.150136][T11108] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 423.150191][T11108] __vb2_init_fileio+0x3f1/0x1100 [ 423.150228][T11108] ? lockdep_hardirqs_on+0x7c/0x110 [ 423.150258][T11108] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.150286][T11108] ? __pollwait+0x271/0x490 [ 423.150312][T11108] vb2_core_poll+0x5ec/0x700 [ 423.150352][T11108] vb2_poll+0x4b/0xe0 [ 423.150386][T11108] vb2_fop_poll+0x10f/0x2c0 [ 423.150445][T11108] ? __pfx_vb2_fop_poll+0x10/0x10 [ 423.150480][T11108] v4l2_poll+0x163/0x320 [ 423.150518][T11108] ? __pfx_v4l2_poll+0x10/0x10 [ 423.150543][T11108] do_sys_poll+0x55c/0xdf0 [ 423.150576][T11108] ? __pfx_do_sys_poll+0x10/0x10 [ 423.150626][T11108] ? preempt_schedule_common+0x44/0xc0 [ 423.150656][T11108] ? __pfx___pollwait+0x10/0x10 [ 423.150681][T11108] ? __pfx_pollwake+0x10/0x10 [ 423.150747][T11108] ? __pfx_timespec64_add_safe+0x10/0x10 [ 423.150782][T11108] ? ktime_get_ts64+0x2d2/0x400 [ 423.150814][T11108] ? read_tsc+0x9/0x20 [ 423.150841][T11108] ? ktime_get_ts64+0x256/0x400 [ 423.150880][T11108] __x64_sys_poll+0x1a6/0x450 [ 423.150904][T11108] ? __pfx___x64_sys_poll+0x10/0x10 [ 423.150937][T11108] do_syscall_64+0xcd/0xfa0 [ 423.150969][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.150993][T11108] RIP: 0033:0x7fe9d598f7c9 [ 423.151013][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.151035][T11108] RSP: 002b:00007fe9d68bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 423.151058][T11108] RAX: ffffffffffffffda RBX: 00007fe9d5be5fa0 RCX: 00007fe9d598f7c9 [ 423.151074][T11108] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 423.151107][T11108] RBP: 00007fe9d5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.151121][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.151135][T11108] R13: 00007fe9d5be6038 R14: 00007fe9d5be5fa0 R15: 00007fff85384d28 [ 423.151167][T11108] [ 425.673032][T11108] syz.2.1148: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 425.756000][T11108] CPU: 0 UID: 0 PID: 11108 Comm: syz.2.1148 Tainted: G I syzkaller #0 PREEMPT(full) [ 425.756039][T11108] Tainted: [I]=FIRMWARE_WORKAROUND [ 425.756048][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.756063][T11108] Call Trace: [ 425.756070][T11108] [ 425.756079][T11108] dump_stack_lvl+0x16c/0x1f0 [ 425.756114][T11108] warn_alloc+0x248/0x3a0 [ 425.756149][T11108] ? __pfx_warn_alloc+0x10/0x10 [ 425.756175][T11108] ? kfree+0x2b8/0x6d0 [ 425.756193][T11108] ? __get_vm_area_node+0x2cd/0x330 [ 425.756233][T11108] ? __get_vm_area_node+0x2cd/0x330 [ 425.756272][T11108] ? __get_vm_area_node+0x208/0x330 [ 425.756312][T11108] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 425.756360][T11108] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 425.756390][T11108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.756436][T11108] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 425.756458][T11108] vmalloc_user_noprof+0x9e/0xe0 [ 425.756494][T11108] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 425.756517][T11108] vb2_vmalloc_alloc+0x135/0x3f0 [ 425.756540][T11108] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 425.756562][T11108] __vb2_queue_alloc+0x8c9/0x1280 [ 425.756614][T11108] vb2_core_reqbufs+0xa90/0xfe0 [ 425.756659][T11108] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 425.756714][T11108] __vb2_init_fileio+0x3f1/0x1100 [ 425.756751][T11108] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.756781][T11108] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 425.756810][T11108] ? __pollwait+0x271/0x490 [ 425.756835][T11108] vb2_core_poll+0x5ec/0x700 [ 425.756876][T11108] vb2_poll+0x4b/0xe0 [ 425.756910][T11108] vb2_fop_poll+0x10f/0x2c0 [ 425.756947][T11108] ? __pfx_vb2_fop_poll+0x10/0x10 [ 425.756981][T11108] v4l2_poll+0x163/0x320 [ 425.757009][T11108] ? __pfx_v4l2_poll+0x10/0x10 [ 425.757038][T11108] do_sys_poll+0x55c/0xdf0 [ 425.757071][T11108] ? __pfx_do_sys_poll+0x10/0x10 [ 425.757122][T11108] ? preempt_schedule_common+0x44/0xc0 [ 425.757158][T11108] ? __pfx___pollwait+0x10/0x10 [ 425.757184][T11108] ? __pfx_pollwake+0x10/0x10 [ 425.757251][T11108] ? __pfx_timespec64_add_safe+0x10/0x10 [ 425.757286][T11108] ? ktime_get_ts64+0x2d2/0x400 [ 425.757319][T11108] ? read_tsc+0x9/0x20 [ 425.757346][T11108] ? ktime_get_ts64+0x256/0x400 [ 425.757385][T11108] __x64_sys_poll+0x1a6/0x450 [ 425.757409][T11108] ? __pfx___x64_sys_poll+0x10/0x10 [ 425.757443][T11108] do_syscall_64+0xcd/0xfa0 [ 425.757475][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.757499][T11108] RIP: 0033:0x7fe9d598f7c9 [ 425.757518][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.757540][T11108] RSP: 002b:00007fe9d68bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 425.757562][T11108] RAX: ffffffffffffffda RBX: 00007fe9d5be5fa0 RCX: 00007fe9d598f7c9 [ 425.757578][T11108] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 425.757593][T11108] RBP: 00007fe9d5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.757607][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.757621][T11108] R13: 00007fe9d5be6038 R14: 00007fe9d5be5fa0 R15: 00007fff85384d28 [ 425.757653][T11108] [ 425.757772][T11108] Mem-Info: [ 426.151433][T11045] Process accounting resumed [ 426.518989][T11108] active_anon:8768 inactive_anon:1459 isolated_anon:0 [ 426.518989][T11108] active_file:12075 inactive_file:60358 isolated_file:0 [ 426.518989][T11108] unevictable:768 dirty:418 writeback:0 [ 426.518989][T11108] slab_reclaimable:11649 slab_unreclaimable:94296 [ 426.518989][T11108] mapped:27704 shmem:2831 pagetables:1257 [ 426.518989][T11108] sec_pagetables:0 bounce:0 [ 426.518989][T11108] kernel_misc_reclaimable:0 [ 426.518989][T11108] free:1302342 free_pcp:19807 free_cma:0 [ 426.806701][T11108] Node 0 active_anon:34712kB inactive_anon:5836kB active_file:48300kB inactive_file:241304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110560kB dirty:1672kB writeback:0kB shmem:9532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB kernel_stack:12880kB pagetables:4840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.956441][T11020] mkiss: ax0: crc mode is auto. [ 426.971311][T11108] Node 1 active_anon:256kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:256kB dirty:0kB writeback:0kB shmem:1792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.183358][T11108] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.335205][T11108] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 427.372568][T11108] Node 0 DMA32 free:1308804kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28216kB inactive_anon:5836kB active_file:39852kB inactive_file:241304kB unevictable:1536kB writepending:1776kB zspages:0kB present:3129332kB managed:2545056kB mlocked:0kB bounce:0kB free_pcp:74656kB local_pcp:74656kB free_cma:0kB [ 427.499835][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1156'. [ 427.517851][T11108] lowmem_reserve[]: 0 0 1 1 1 [ 427.531576][T11108] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 427.637147][T11108] lowmem_reserve[]: 0 0 0 0 0 [ 427.663956][T11108] Node 1 Normal free:3902360kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5332kB local_pcp:5332kB free_cma:0kB [ 427.748836][T11108] lowmem_reserve[]: 0 0 0 0 0 [ 427.762822][T11108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 427.814707][T11108] Node 0 DMA32: 5777*4kB (UM) 1300*8kB (UME) 272*16kB (UME) 1638*32kB (UME) 1071*64kB (UM) 664*128kB (UM) 332*256kB (UME) 153*512kB (M) 45*1024kB (ME) 2*2048kB (U) 208*4096kB (UM) = 1309284kB [ 427.887536][T11108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 427.935821][T11108] Node 1 Normal: 134*4kB (UME) 56*8kB (UME) 16*16kB (UME) 218*32kB (UME) 110*64kB (UME) 34*128kB (UME) 13*256kB (UM) 9*512kB (UME) 2*1024kB (M) 3*2048kB (UME) 944*4096kB (M) = 3902360kB [ 428.032217][T11108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.084724][T11108] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 428.174592][T11108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.232923][T11108] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.298565][T11108] 73235 total pagecache pages [ 428.326288][T11108] 9 pages in swap cache [ 428.361124][T11108] Free swap = 124960kB [ 428.387684][T11108] Total swap = 124996kB [ 428.409641][T11108] 2097051 pages RAM [ 428.439272][T11108] 0 pages HighMem/MovableOnly [ 428.478336][T11108] 428697 pages reserved [ 428.510773][T11108] 0 pages cma reserved [ 428.861308][T11165] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 428.913729][T11165] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 430.587841][T11194] Invalid ELF header magic: != ELF [ 432.166230][T11226] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 432.899083][T11239] Invalid ELF header magic: != ELF [ 433.344426][T11250] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 434.039817][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 434.058091][T11259] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1183'. [ 434.640333][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1186'. [ 434.766888][T11271] vivid-007: ================= START STATUS ================= [ 434.841747][T11271] vivid-007: Enable Output Cropping: true [ 434.864336][ T5836] Bluetooth: hci1: unexpected event 0x3e length: 728 > 260 [ 434.864368][ T5836] Bluetooth: hci1: unexpected subevent 0x0c length: 727 > 5 [ 434.911677][T11271] vivid-007: Enable Output Composing: true [ 434.957530][T11271] vivid-007: Enable Output Scaler: true [ 435.006257][T11271] vivid-007: Tx RGB Quantization Range: Automatic [ 435.071318][T11271] vivid-007: Transmit Mode: HDMI [ 435.157100][T11271] vivid-007: Hotplug Present: 0x00000000 [ 435.219423][T11271] vivid-007: RxSense Present: 0x00000000 [ 435.248473][T11271] vivid-007: EDID Present: 0x00000000 [ 435.277583][T11276] writes to the poll attribute are ignored. [ 435.296892][T11271] vivid-007: ================== END STATUS ================== [ 435.308891][T11276] please use driver specific parameters instead. [ 437.290645][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1196'. [ 438.322606][T11151] mkiss: ax0: crc mode is auto. [ 439.430254][T11332] zswap: compressor not available [ 440.502566][T11361] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 440.540784][T11361] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 441.581447][T11374] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 442.165020][ T5836] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 442.703075][T11381] netlink: set zone limit has 8 unknown bytes [ 443.801183][T11408] random: crng reseeded on system resumption [ 443.811604][T11406] writes to the poll attribute are ignored. [ 443.818099][T11406] please use driver specific parameters instead. [ 444.241003][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 445.598968][T11445] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1221'. [ 446.689184][ T5833] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 446.689217][ T5833] Bluetooth: hci2: unexpected subevent 0x0c length: 727 > 5 [ 446.782345][T11477] futex_wake_op: syz.2.1228 tries to shift op by -2048; fix this program [ 446.832241][T11477] futex_wake_op: syz.2.1228 tries to shift op by -2048; fix this program [ 446.947223][T11480] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1231'. [ 447.320677][T11483] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 448.365465][T11503] binder: 11502:11503 ioctl c00c6211 0 returned -14 [ 448.630158][T11493] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 449.764977][T11341] mkiss: ax0: crc mode is auto. [ 450.797789][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.805406][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.685282][T11543] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 452.886441][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 453.135710][T11568] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 453.402537][T11566] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 453.991466][T11579] hub 3-0:1.0: USB hub found [ 454.039915][T11579] hub 3-0:1.0: 1 port detected [ 454.100331][T11579] usb usb3: authorized to connect [ 454.351234][T11593] FAULT_INJECTION: forcing a failure. [ 454.351234][T11593] name failslab, interval 1, probability 0, space 0, times 0 [ 454.408429][T11593] CPU: 0 UID: 0 PID: 11593 Comm: syz.2.1260 Tainted: G I syzkaller #0 PREEMPT(full) [ 454.408469][T11593] Tainted: [I]=FIRMWARE_WORKAROUND [ 454.408478][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.408492][T11593] Call Trace: [ 454.408500][T11593] [ 454.408509][T11593] dump_stack_lvl+0x16c/0x1f0 [ 454.408543][T11593] should_fail_ex+0x512/0x640 [ 454.408582][T11593] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 454.408612][T11593] should_failslab+0xc2/0x120 [ 454.408646][T11593] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 454.408673][T11593] ? __d_alloc+0x32/0xae0 [ 454.408706][T11593] ? __d_alloc+0x32/0xae0 [ 454.408732][T11593] __d_alloc+0x32/0xae0 [ 454.408763][T11593] d_alloc_parallel+0x111/0x1510 [ 454.408812][T11593] ? __pfx_d_alloc_parallel+0x10/0x10 [ 454.408859][T11593] ? lockdep_init_map_type+0x5c/0x280 [ 454.408896][T11593] ? lockdep_init_map_type+0x5c/0x280 [ 454.408937][T11593] __lookup_slow+0x193/0x460 [ 454.408974][T11593] ? __pfx___lookup_slow+0x10/0x10 [ 454.409015][T11593] ? __mod_node_page_state+0xd0/0x1d0 [ 454.409058][T11593] ? __mod_node_page_state+0xd0/0x1d0 [ 454.409095][T11593] ? d_lookup+0xe7/0x190 [ 454.409135][T11593] lookup_noperm+0xe1/0x110 [ 454.409172][T11593] simple_start_creating+0xd1/0x1b0 [ 454.409199][T11593] debugfs_start_creating.part.0+0x82/0x190 [ 454.409226][T11593] __debugfs_create_file+0xa7/0x6b0 [ 454.409254][T11593] debugfs_create_file_full+0x41/0x60 [ 454.409281][T11593] ref_tracker_dir_debugfs+0x19d/0x290 [ 454.409322][T11593] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 454.409372][T11593] ? lockdep_init_map_type+0x5c/0x280 [ 454.409413][T11593] preinit_net.part.0+0x24e/0x8a0 [ 454.409441][T11593] copy_net_ns+0x3ba/0x690 [ 454.409473][T11593] create_new_namespaces+0x3ea/0xa90 [ 454.409507][T11593] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 454.409539][T11593] ksys_unshare+0x45b/0xa40 [ 454.409572][T11593] ? __pfx_ksys_unshare+0x10/0x10 [ 454.409606][T11593] ? xfd_validate_state+0x61/0x180 [ 454.409650][T11593] __x64_sys_unshare+0x31/0x40 [ 454.409682][T11593] do_syscall_64+0xcd/0xfa0 [ 454.409714][T11593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.409739][T11593] RIP: 0033:0x7fe9d598f7c9 [ 454.409772][T11593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.409796][T11593] RSP: 002b:00007fe9d68bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 454.409898][T11593] RAX: ffffffffffffffda RBX: 00007fe9d5be5fa0 RCX: 00007fe9d598f7c9 [ 454.409926][T11593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 454.409942][T11593] RBP: 00007fe9d5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 454.409957][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.409972][T11593] R13: 00007fe9d5be6038 R14: 00007fe9d5be5fa0 R15: 00007fff85384d28 [ 454.410008][T11593] [ 454.713460][T11599] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1260' sets config #0 [ 455.519723][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 455.720822][T11606] Console: switching to colour VGA+ 80x25 [ 455.889473][T11612] futex_wake_op: syz.3.1264 tries to shift op by -2048; fix this program [ 455.957134][T11612] futex_wake_op: syz.3.1264 tries to shift op by -2048; fix this program [ 456.221183][T11602] Process accounting paused [ 456.493179][T11619] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 458.937383][T11671] netlink: 'syz.0.1276': attribute type 2 has an invalid length. [ 460.270130][T11677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 460.313693][T11677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 460.349493][T11677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 460.387604][T11677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 460.405220][T11677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 461.565379][T11530] mkiss: ax0: crc mode is auto. [ 461.826179][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 462.384038][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 462.390277][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 462.467069][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 463.313177][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 463.850904][T11756] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 464.316058][T11756] PCI: Can't parse resource_alignment parameter: BFjl [ 464.544265][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 465.367280][T11778] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 466.048098][T11788] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 469.768194][T11835] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 471.395869][T11859] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 473.046360][T11738] mkiss: ax0: crc mode is auto. [ 473.521115][T11905] random: crng reseeded on system resumption [ 475.774317][T11933] bond0: no command found in slaves file - use +ifname or -ifname [ 476.320739][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 476.456450][T11955] unsupported nlmsg_type 40 [ 480.111068][T12030] cgroup: fork rejected by pids controller in /syz2 [ 482.283991][T12061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 482.314900][T12061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 482.354512][T12061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 482.397778][T12061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 482.997640][T12096] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 483.344182][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 483.634591][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1349'. [ 484.347084][T12129] binder: 12119:12129 unknown command 7 [ 484.383776][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 484.389864][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 484.433680][T12129] binder: 12119:12129 ioctl c0306201 0 returned -22 [ 484.468854][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 484.569593][T12120] sp0: Synchronizing with TNC [ 484.932766][T11924] mkiss: ax0: crc mode is auto. [ 484.995908][T12139] can: request_module (can-proto-5) failed. [ 485.466033][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'. [ 486.567873][T12171] Process accounting resumed [ 486.891296][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1360'. [ 487.105828][T12185] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 487.401237][T12194] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 487.453651][T12194] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1363'. [ 488.875659][T12213] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1366'. [ 490.180483][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1372'. [ 493.394034][T12263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.422563][T12263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.473764][T12263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.479945][T12263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.554294][T12285] kexec: Could not allocate control_code_buffer [ 493.595299][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1379'. [ 494.063603][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 494.569052][T12323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1382'. [ 495.292968][ T30] audit: type=1800 audit(4145.598:12): pid=12329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1384" name="lu_gp_id" dev="configfs" ino=43549 res=0 errno=0 [ 495.428023][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 495.508508][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 495.515399][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 496.334153][T12164] mkiss: ax0: crc mode is auto. [ 497.114047][T12350] mkiss: ax0: crc mode is auto. [ 497.123236][T12355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 497.175198][T12355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 497.254238][T12355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.293790][T12355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 499.183784][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 499.264129][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 499.343669][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 499.518952][T12382] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 499.542196][T12382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 499.566322][T12382] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 499.587825][T12382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 500.564600][T12421] netlink: 'syz.3.1405': attribute type 11 has an invalid length. [ 500.867974][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 501.062149][T12430] __vm_enough_memory: pid: 12430, comm: syz.0.1406, bytes: 8589938688 not enough memory for the allocation [ 501.537230][T12425] usb usb15: usbfs: process 12425 (syz.2.1404) did not claim interface 0 before use [ 501.583578][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 501.589679][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 501.663726][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 501.737557][T12446] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 502.013072][T12433] Invalid ELF header magic: != ELF [ 503.760805][T12458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 503.779099][T12458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.796694][T12458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.809615][T12458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.485813][T12485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.538038][T12485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.571374][T12485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.613792][T12485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 506.913062][T12534] Invalid ELF header magic: != ELF [ 507.033741][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 507.583932][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 507.590832][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 507.663767][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 507.936460][T12369] mkiss: ax0: crc mode is auto. [ 509.738714][T12558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 509.773204][T12558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 509.815178][T12558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 509.858839][T12558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.183871][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 511.823632][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 511.829741][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 511.903594][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 512.234722][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.241061][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.165691][T12670] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 516.821040][T12701] Process accounting paused [ 517.083184][T12724] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 518.744398][T12758] aoe: could not set interface list: too many interfaces [ 519.037689][T12763] Invalid ELF header magic: != ELF [ 519.485456][T12578] mkiss: ax0: crc mode is auto. [ 519.913174][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 520.762535][ T5836] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 521.650176][T12817] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 522.627848][ T5836] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 522.637559][ T5836] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 522.647619][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: kworker/u9:4 Tainted: G I syzkaller #0 PREEMPT(full) [ 522.647660][ T5836] Tainted: [I]=FIRMWARE_WORKAROUND [ 522.647669][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.647686][ T5836] Workqueue: hci2 hci_rx_work [ 522.647715][ T5836] Call Trace: [ 522.647724][ T5836] [ 522.647734][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 522.647766][ T5836] sysfs_warn_dup+0x7f/0xa0 [ 522.647797][ T5836] sysfs_create_dir_ns+0x24b/0x2b0 [ 522.647828][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 522.647857][ T5836] ? find_held_lock+0x2b/0x80 [ 522.647889][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 522.647913][ T5836] kobject_add_internal+0x2c4/0x9b0 [ 522.647952][ T5836] kobject_add+0x16e/0x240 [ 522.647985][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 522.648021][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 522.648043][ T5836] ? kobject_put+0xab/0x5a0 [ 522.648083][ T5836] device_add+0x288/0x1aa0 [ 522.648123][ T5836] ? __pfx_dev_set_name+0x10/0x10 [ 522.648148][ T5836] ? __pfx_device_add+0x10/0x10 [ 522.648263][ T5836] ? mgmt_send_event_skb+0x2fb/0x460 [ 522.648326][ T5836] hci_conn_add_sysfs+0x17e/0x230 [ 522.648409][ T5836] le_conn_complete_evt+0x1260/0x2150 [ 522.648477][ T5836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 522.648532][ T5836] ? bt_warn+0xe4/0x120 [ 522.648578][ T5836] ? __pfx_bt_warn+0x10/0x10 [ 522.648635][ T5836] hci_le_conn_complete_evt+0x23c/0x370 [ 522.648702][ T5836] hci_le_meta_evt+0x357/0x5e0 [ 522.648755][ T5836] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 522.648819][ T5836] hci_event_packet+0x685/0x11c0 [ 522.648871][ T5836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 522.648934][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 522.648997][ T5836] ? kcov_remote_start+0x3c9/0x6d0 [ 522.649038][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 522.649116][ T5836] hci_rx_work+0x2c9/0xeb0 [ 522.649172][ T5836] process_one_work+0x9cf/0x1b70 [ 522.649384][ T5836] ? __pfx_process_one_work+0x10/0x10 [ 522.649487][ T5836] ? assign_work+0x1a0/0x250 [ 522.649568][ T5836] worker_thread+0x6c8/0xf10 [ 522.649644][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 522.649697][ T5836] kthread+0x3c5/0x780 [ 522.649775][ T5836] ? __pfx_kthread+0x10/0x10 [ 522.649855][ T5836] ? rcu_is_watching+0x12/0xc0 [ 522.649917][ T5836] ? __pfx_kthread+0x10/0x10 [ 522.650007][ T5836] ret_from_fork+0x675/0x7d0 [ 522.650087][ T5836] ? __pfx_kthread+0x10/0x10 [ 522.650166][ T5836] ret_from_fork_asm+0x1a/0x30 [ 522.650264][ T5836] [ 522.650313][ T5836] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 522.943980][ T5836] Bluetooth: hci2: failed to register connection device [ 523.061742][T12834] netlink: zone id is out of range [ 523.111389][T12834] netlink: zone id is out of range [ 523.170144][T12836] netlink: zone id is out of range [ 523.195087][T12834] netlink: zone id is out of range [ 523.265728][T12836] netlink: del zone limit has 4 unknown bytes [ 523.293543][T12834] netlink: zone id is out of range [ 523.355542][T12834] netlink: zone id is out of range [ 523.401721][T12834] netlink: zone id is out of range [ 523.440454][T12836] HfR: entered promiscuous mode [ 523.485231][T12834] netlink: zone id is out of range [ 523.539673][T12834] netlink: zone id is out of range [ 523.610614][T12836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1490'. [ 523.922775][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 525.028073][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 527.538422][T12894] KVM: debugfs: duplicate directory 12894-4 [ 527.595448][T12894] KVM: debugfs: duplicate directory 12894-5 [ 527.601972][T12894] KVM: debugfs: duplicate directory 12894-6 [ 527.665152][T12894] KVM: debugfs: duplicate directory 12894-7 [ 527.736299][T12894] KVM: debugfs: duplicate directory 12894-8 [ 527.742985][T12894] KVM: debugfs: duplicate directory 12894-9 [ 527.824280][T12894] KVM: debugfs: duplicate directory 12894-10 [ 527.830919][T12894] KVM: debugfs: duplicate directory 12894-11 [ 527.895573][T12894] KVM: debugfs: duplicate directory 12894-12 [ 527.902364][T12894] KVM: debugfs: duplicate directory 12894-13 [ 530.203937][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 530.739798][ T5836] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 530.748048][ T5836] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 530.757858][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: kworker/u9:4 Tainted: G I syzkaller #0 PREEMPT(full) [ 530.757896][ T5836] Tainted: [I]=FIRMWARE_WORKAROUND [ 530.757905][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.757922][ T5836] Workqueue: hci2 hci_rx_work [ 530.757949][ T5836] Call Trace: [ 530.757957][ T5836] [ 530.757966][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 530.758014][ T5836] sysfs_warn_dup+0x7f/0xa0 [ 530.758045][ T5836] sysfs_create_dir_ns+0x24b/0x2b0 [ 530.758076][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 530.758105][ T5836] ? find_held_lock+0x2b/0x80 [ 530.758137][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 530.758161][ T5836] kobject_add_internal+0x2c4/0x9b0 [ 530.758201][ T5836] kobject_add+0x16e/0x240 [ 530.758234][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 530.758275][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 530.758298][ T5836] ? kobject_put+0xab/0x5a0 [ 530.758338][ T5836] device_add+0x288/0x1aa0 [ 530.758379][ T5836] ? __pfx_dev_set_name+0x10/0x10 [ 530.758405][ T5836] ? __pfx_device_add+0x10/0x10 [ 530.758443][ T5836] ? mgmt_send_event_skb+0x2fb/0x460 [ 530.758478][ T5836] hci_conn_add_sysfs+0x17e/0x230 [ 530.758510][ T5836] le_conn_complete_evt+0x1260/0x2150 [ 530.758544][ T5836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 530.758569][ T5836] ? bt_warn+0xe4/0x120 [ 530.758590][ T5836] ? __pfx_bt_warn+0x10/0x10 [ 530.758620][ T5836] hci_le_conn_complete_evt+0x23c/0x370 [ 530.758653][ T5836] hci_le_meta_evt+0x357/0x5e0 [ 530.758681][ T5836] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 530.758712][ T5836] hci_event_packet+0x685/0x11c0 [ 530.758737][ T5836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 530.758768][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 530.758797][ T5836] ? kcov_remote_start+0x3c9/0x6d0 [ 530.758819][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.758856][ T5836] hci_rx_work+0x2c9/0xeb0 [ 530.758887][ T5836] process_one_work+0x9cf/0x1b70 [ 530.758937][ T5836] ? __pfx_process_one_work+0x10/0x10 [ 530.758985][ T5836] ? assign_work+0x1a0/0x250 [ 530.759023][ T5836] worker_thread+0x6c8/0xf10 [ 530.759058][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 530.759080][ T5836] kthread+0x3c5/0x780 [ 530.759116][ T5836] ? __pfx_kthread+0x10/0x10 [ 530.759153][ T5836] ? rcu_is_watching+0x12/0xc0 [ 530.759180][ T5836] ? __pfx_kthread+0x10/0x10 [ 530.759218][ T5836] ret_from_fork+0x675/0x7d0 [ 530.759259][ T5836] ? __pfx_kthread+0x10/0x10 [ 530.759296][ T5836] ret_from_fork_asm+0x1a/0x30 [ 530.759346][ T5836] [ 530.759369][ T5836] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 531.034611][ T5836] Bluetooth: hci2: failed to register connection device [ 531.204726][T12923] net_ratelimit: 369 callbacks suppressed [ 531.204748][T12923] netlink: zone id is out of range [ 531.339280][T12923] netlink: del zone limit has 4 unknown bytes [ 531.355425][T12795] mkiss: ax0: crc mode is auto. [ 531.421851][T12928] openvswitch: HfR: Dropping previously announced user features [ 531.490330][T12923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1511'. [ 531.569124][T12922] netlink: set zone limit has 8 unknown bytes [ 532.653079][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.733806][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.015401][T12953] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1518'. [ 533.108705][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 536.880321][T12999] zswap: compressor not available [ 536.914920][T13000] zswap: compressor not available [ 538.505682][T13022] netlink: 222 bytes leftover after parsing attributes in process `syz.1.1532'. [ 539.610992][T13034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.657941][T13034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.718074][T13034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.764144][T13034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.813563][T13034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 539.902645][T13034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 539.961339][T13034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 540.437314][T13066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1543'. [ 541.424458][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 541.649293][T13098] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 541.667827][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 541.743731][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 541.823730][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 542.704827][T12943] mkiss: ax0: crc mode is auto. [ 543.903616][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 544.058728][T13155] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 544.353000][T13155] vhci_hcd: invalid port number 252 [ 544.353021][T13155] vhci_hcd: default hub control req: 040f v0772 i00fc l2 [ 545.192026][T13169] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 545.270185][T13169] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 545.305753][T13169] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 545.339732][T13169] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 545.376045][T13169] page dumped because: unmovable page [ 545.397612][T13169] page_owner info is not present (never set?) [ 545.984484][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 546.299270][T13195] bond0: invalid ARP target specified [ 547.534125][T13197] Process accounting resumed [ 547.542104][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1572'. [ 548.064332][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 548.498562][ T30] audit: type=1400 audit(8277292065.200:13): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13227 comm="syz.3.1576" [ 548.564682][T13228] mkiss: ax0: crc mode is auto. [ 550.147603][T13251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.159869][T13251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.172315][T13251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.180532][T13251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.188431][T13251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.909839][T13250] chnl_net:caif_netlink_parms(): no params data found [ 551.437549][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.474852][T13250] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.502861][T13250] bridge_slave_0: entered allmulticast mode [ 551.535288][T13250] bridge_slave_0: entered promiscuous mode [ 551.564550][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.622231][T13250] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.653827][T13250] bridge_slave_1: entered allmulticast mode [ 551.679738][T13250] bridge_slave_1: entered promiscuous mode [ 551.843769][T13250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.900828][T13250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.040320][T13250] team0: Port device team_slave_0 added [ 552.088080][T13250] team0: Port device team_slave_1 added [ 552.201811][T13250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.223849][T13251] Bluetooth: hci4: command tx timeout [ 552.275347][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.394905][T13250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.453651][T13250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.460656][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.568662][T13250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.777179][T13250] hsr_slave_0: entered promiscuous mode [ 552.809515][T13250] hsr_slave_1: entered promiscuous mode [ 552.834579][T13250] debugfs: 'hsr0' already exists in 'hsr' [ 552.863886][T13250] Cannot create hsr debugfs directory [ 553.630085][T13250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 553.677979][T13250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 553.737315][T13250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 553.786611][T13250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 554.276738][T13250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.304619][T13251] Bluetooth: hci4: command tx timeout [ 554.501307][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 554.530268][T13250] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.625661][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.632828][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.720314][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.727599][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.990983][T13250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 555.050171][T13250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.226042][T13331] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1953396082.1600482665.1886614899), cmd(3) [ 555.309886][ T6241] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.327935][T13333] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1602'. [ 556.202057][T13250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.384539][T13251] Bluetooth: hci4: command tx timeout [ 556.507175][T13353] input: jJǸ-9%vJ86 as /devices/virtual/input/input34 [ 557.529853][T13250] veth0_vlan: entered promiscuous mode [ 557.594840][T13250] veth1_vlan: entered promiscuous mode [ 557.752971][T13250] veth0_macvtap: entered promiscuous mode [ 557.803363][T13250] veth1_macvtap: entered promiscuous mode [ 557.915539][T13250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.021943][T13250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.191307][ T6255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.228527][ T6255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.299775][ T6255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.378409][ T6255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.463758][T13251] Bluetooth: hci4: command tx timeout [ 558.788765][ T6260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.831332][ T6260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.371053][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.433168][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.031355][T13247] mkiss: ax0: crc mode is auto. [ 560.169084][T13422] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 560.288658][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 560.596049][T13429] netlink: 'syz.0.1624': attribute type 2 has an invalid length. [ 560.652599][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 561.260656][T13442] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1629'. [ 561.324588][T13448] sd 0:0:1:0: PR command failed: 1026 [ 561.347976][T13448] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 561.364297][T13449] program syz.4.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.387308][T13448] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 561.947090][T13459] netlink: 'syz.1.1632': attribute type 2 has an invalid length. [ 562.020214][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 562.043159][T13453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.955659][T13472] bond0: invalid ARP target specified [ 562.999086][T13480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 564.494657][T13501] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 565.390244][T13523] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 565.415886][T13524] netlink: 266 bytes leftover after parsing attributes in process `syz.1.1647'. [ 565.466470][T13524] IPv6: NLM_F_CREATE should be specified when creating new route [ 565.635099][T13530] random: crng reseeded on system resumption [ 566.148978][T13542] netlink: 'syz.1.1653': attribute type 2 has an invalid length. [ 566.194720][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 567.497963][T13568] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 569.194795][T13593] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 570.686914][T13625] [U] [ 570.690331][T13625] [U] [ 570.693051][T13625] [U] [ 570.695763][T13625] [U] [ 570.726401][T13625] [U] [ 570.729172][T13625] [U] [ 570.731883][T13625] [U] [ 570.734592][T13625] [U] [ 570.760776][T13625] [U] [ 570.763549][T13625] [U] [ 570.766267][T13625] [U] [ 570.768977][T13625] [U] [ 570.836088][T13625] [U] [ 570.839051][T13625] [U] ]Z?֑SOK [ 570.897569][T13625] [U] ЦO?ZEI?:Jδ0BŚ]UY!_"F3ZIJZ¸Ջ:16\ Q W!?_|ӴQSТQ73[J[# XLPë/ /.Q/ЀPYE.ס;>_ʒE?&#MS^յ;KVQ JDFAS.A)ɌZP"{+>BY/*~6XN.ظN>|`I~GҬEP2HN.VV\ [ 571.270203][T13625] [U] W;L*$#UG(G{ANIENʠ0@01MGL<ˏ+UEL6AʡKҕTGFQ(9AZBѨR҉Nũ/ ΜVO\P V^>K{VL^\ [ 571.514404][T13438] mkiss: ax0: crc mode is auto. [ 571.525046][T13625] [U] Q#ӥ`IQȋ>JWӴ'ٵ%7]_܎198/SIFC}_9C%AU5L"AIه  E*$KƐPӅK#"H£.F:3ƛ?P)9' KB~QܿJ52O.(AU1[ [ 571.766370][T13625] [U] 8Q'K^5YA7G]}}6Q):&{¶<* !}N|HUS2 |؜'PA}XɖOCGOVMAVFԲTXIј;BZHEԆ3IP ^^M3EG'|SOK1J"RPKX.ZNXF+Rɻ"-غ)2~VD [ 571.842550][T13625] [U] @MPGRT?B}ؒ$äY٘LG]!?_GXAQG{̨PJWF4FVY M_ #?|TU^H< [ 571.887907][T13625] [U] ҭ5U T~UY!(AʼnJY%4ODC6TR UO [ 571.922338][T13625] [U] Ҝ2*+MGˮT4R{ɉD0XPɡM7O- [ 571.943718][T13625] [U] -Y~S<@9[Y'C:I /K``8LA=Ď<+CMA_ [ 571.961363][T13623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.975566][T13623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 571.981885][T13625] [U] `OB4].0]9X++(~YD,Zdz$фLOBNJX` ASY [ 572.003173][T13623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 572.022323][T13623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 572.040653][T13623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 572.060505][T13623] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 572.089533][T13623] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 572.614160][T13649] random: crng reseeded on system resumption [ 573.103820][T13251] Bluetooth: hci0: command 0x0406 tx timeout [ 573.667220][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.673709][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.983833][T13251] Bluetooth: hci1: command 0x0406 tx timeout [ 574.063580][T13251] Bluetooth: hci4: command 0x0c1a tx timeout [ 574.070727][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 574.077464][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 574.228460][T13689] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 574.436733][T13692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1688'. [ 575.083276][T13704] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 575.136348][T13704] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 575.250224][T13704] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 575.421829][T13704] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 575.492618][T13721] sctp: [Deprecated]: syz.4.1692 (pid 13721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.492618][T13721] Use struct sctp_sack_info instead [ 575.574738][T13704] page dumped because: unmovable page [ 575.580196][T13704] page_owner info is not present (never set?) [ 575.614251][T13687] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 576.143643][T13687] Bluetooth: hci4: command 0x0c1a tx timeout [ 577.680001][T13767] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 578.223684][T13687] Bluetooth: hci4: command 0x0c1a tx timeout [ 578.488600][T13760] Process accounting paused [ 579.564452][T13793] netlink: 'syz.4.1707': attribute type 2 has an invalid length. [ 579.572233][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 581.182324][T13687] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 582.158419][T13826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 582.234025][T13826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.250523][T13826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.290708][T13826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.319968][T13826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 582.418502][T13839] netlink: 'syz.0.1717': attribute type 2 has an invalid length. [ 582.487605][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 583.115175][T13650] mkiss: ax0: crc mode is auto. [ 583.296695][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1718'. [ 583.818355][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 583.834353][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 583.842982][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 583.853647][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 583.861285][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.905422][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 584.308377][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 584.314657][T13687] Bluetooth: hci3: command 0x0406 tx timeout [ 584.320678][T13687] Bluetooth: hci1: command 0x0406 tx timeout [ 584.388663][T13687] Bluetooth: hci4: command 0x0c1a tx timeout [ 584.467158][T13861] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 584.594600][T13861] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 584.632989][T13856] chnl_net:caif_netlink_parms(): no params data found [ 584.855885][T13874] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 584.952938][T13876] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 585.058356][T13856] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.086749][T13856] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.117189][T13856] bridge_slave_0: entered allmulticast mode [ 585.146989][T13856] bridge_slave_0: entered promiscuous mode [ 585.199585][T13856] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.236191][T13856] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.260045][T13856] bridge_slave_1: entered allmulticast mode [ 585.286762][T13856] bridge_slave_1: entered promiscuous mode [ 585.502269][T13856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.557275][T13856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.785609][T13856] team0: Port device team_slave_0 added [ 585.802977][T13856] team0: Port device team_slave_1 added [ 585.903986][T13687] Bluetooth: hci5: command tx timeout [ 585.927022][T13856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.943337][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.006087][T13856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.059856][T13856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.074623][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.178719][T13856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.437453][T13856] hsr_slave_0: entered promiscuous mode [ 586.477654][T13856] hsr_slave_1: entered promiscuous mode [ 586.518615][T13856] debugfs: 'hsr0' already exists in 'hsr' [ 586.553128][T13856] Cannot create hsr debugfs directory [ 586.925383][T13911] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 587.069693][T13911] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 587.225997][T13913] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 587.327586][T13913] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 587.672280][T13856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 587.749112][T13856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 587.875488][T13856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 587.917179][T13922] QAT: Stopping all acceleration devices. [ 587.944773][T13856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 587.984071][T13687] Bluetooth: hci5: command tx timeout [ 588.012032][T13687] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 588.012064][T13687] Bluetooth: hci0: unexpected subevent 0x0a length: 725 > 30 [ 588.247317][T13856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.309460][T13856] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.339217][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.346527][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.408460][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.415801][ T6241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.675115][T13937] zswap: compressor not available [ 589.485004][T13856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.064147][T13687] Bluetooth: hci5: command tx timeout [ 590.989900][T13856] veth0_vlan: entered promiscuous mode [ 591.079648][T13856] veth1_vlan: entered promiscuous mode [ 591.225842][T13856] veth0_macvtap: entered promiscuous mode [ 591.275725][T13856] veth1_macvtap: entered promiscuous mode [ 591.371528][T13856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.434390][T13856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.503102][ T6241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.547760][ T6241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.621173][ T6241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.729267][ T6241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.929855][ T6259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.981940][ T6259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.094023][ T6259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.101885][ T6259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.149485][T13687] Bluetooth: hci5: command tx timeout [ 592.508305][T13986] ptp ptp0: new virtual clock ptp1 [ 592.571959][T13986] ptp ptp0: new virtual clock ptp2 [ 592.642586][T13986] ptp ptp0: new virtual clock ptp3 [ 592.672068][T13986] ptp ptp0: guarantee physical clock free running [ 592.962486][T13998] netlink: 'syz.4.1749': attribute type 2 has an invalid length. [ 592.995417][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 594.585084][T13863] mkiss: ax0: crc mode is auto. [ 594.736751][T14031] ecryptfs_miscdev_write: Error while inspecting packet size [ 595.836882][T14045] size and base must be multiples of 4 kiB [ 595.842746][T14045] CPU: 0 UID: 0 PID: 14045 Comm: syz.4.1764 Tainted: G I syzkaller #0 PREEMPT(full) [ 595.842783][T14045] Tainted: [I]=FIRMWARE_WORKAROUND [ 595.842792][T14045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.842807][T14045] Call Trace: [ 595.842815][T14045] [ 595.842823][T14045] dump_stack_lvl+0x16c/0x1f0 [ 595.842858][T14045] mtrr_del+0xd1/0x110 [ 595.842893][T14045] mtrr_ioctl+0x922/0xcf0 [ 595.842928][T14045] ? __pfx_mtrr_ioctl+0x10/0x10 [ 595.842971][T14045] ? find_held_lock+0x2b/0x80 [ 595.843004][T14045] ? __fget_files+0x20e/0x3c0 [ 595.843030][T14045] ? __pfx_mtrr_ioctl+0x10/0x10 [ 595.843064][T14045] proc_reg_unlocked_ioctl+0x229/0x320 [ 595.843099][T14045] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 595.843137][T14045] __x64_sys_ioctl+0x18e/0x210 [ 595.843177][T14045] do_syscall_64+0xcd/0xfa0 [ 595.843208][T14045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.843233][T14045] RIP: 0033:0x7fd21098f7c9 [ 595.843252][T14045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.843276][T14045] RSP: 002b:00007fd211862038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.843298][T14045] RAX: ffffffffffffffda RBX: 00007fd210be5fa0 RCX: 00007fd21098f7c9 [ 595.843314][T14045] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000009 [ 595.843329][T14045] RBP: 00007fd210a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 595.843344][T14045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.843358][T14045] R13: 00007fd210be6038 R14: 00007fd210be5fa0 R15: 00007ffc1ce80518 [ 595.843389][T14045] [ 597.425662][T14060] netlink: 'syz.4.1770': attribute type 2 has an invalid length. [ 597.473590][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 598.062393][T14069] input: f as /devices/virtual/input/input36 [ 599.911362][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 599.911397][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 599.928569][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 599.928624][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 599.942511][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 599.942538][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 599.960596][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 599.960644][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 599.975851][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 599.975880][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 599.992548][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 599.992598][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.008632][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 600.008661][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.023607][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 600.023651][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.038950][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 600.038978][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.053815][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 600.053859][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.071282][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 600.071311][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.087107][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 600.087152][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.102214][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 600.102243][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.119352][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 600.119399][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.133385][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 600.133506][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.152162][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 600.152211][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.165558][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 600.165585][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.181739][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 600.181784][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.195290][T13687] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 600.195317][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.213597][T13687] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 600.213646][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.229698][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.238662][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.244855][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.252509][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.258973][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.267160][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.273152][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.283648][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.289673][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.297363][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.304321][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.312822][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.320121][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.328646][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.335242][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.342772][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.354205][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.361754][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.369018][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.376716][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.383208][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.391376][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.397488][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.406522][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.412540][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.421699][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.430433][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.438065][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.444112][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.451604][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.458758][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.469887][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.476064][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.484193][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.490234][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.497855][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.505062][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.513111][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.523735][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.531313][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.537432][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.546236][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.552248][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.562429][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.568528][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.576290][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.582482][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.591099][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.599455][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.607183][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.613752][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.622266][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.629077][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.637050][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.643029][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.659218][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.665852][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.673577][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.679552][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.687882][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.693977][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.701479][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.707487][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.716010][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.724123][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.731990][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.738898][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.748020][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.754695][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.762563][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.772669][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.780358][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.793601][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.801180][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.808728][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.817057][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.823083][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.832951][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.840347][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.848722][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.856213][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.863891][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.869845][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.877559][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.883749][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.891730][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.899038][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.913547][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.920059][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.928174][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.934745][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.942252][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.952434][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.966364][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.972384][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.980765][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 600.989076][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 600.997141][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 601.003099][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 601.011234][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 601.017284][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 601.025422][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 601.032813][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 601.043493][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 601.050230][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 601.057971][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 601.064129][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 601.072005][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 601.078342][T13687] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 601.085957][T13687] Bluetooth: hci1: Malformed LE Event: 0x0d [ 601.833773][T14109] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 602.232490][T14101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 602.254729][T14101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 602.293983][T14101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.318280][T14101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.352049][T14101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 602.384015][T14101] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 602.409550][T14101] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 602.445632][T14101] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 603.017790][T14125] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 603.151132][T14125] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 603.984592][T13687] Bluetooth: hci0: command 0x0406 tx timeout [ 604.303836][T13687] Bluetooth: hci3: command 0x0406 tx timeout [ 604.310941][T13687] Bluetooth: hci1: command 0x0406 tx timeout [ 604.358111][T14155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1792'. [ 604.380577][T14155] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1792'. [ 604.391877][T13687] Bluetooth: hci4: command 0x0c1a tx timeout [ 604.398104][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 604.438539][T14155] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 604.464994][T13687] Bluetooth: hci5: command 0x0c1a tx timeout [ 604.570845][T14157] dyndbg: bad flag-op P, at start of P#, [ 604.594667][T14157] dyndbg: flags parse failed [ 604.638082][ T30] audit: type=1800 audit(4294967338.830:14): pid=14155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1792" name="lu_gp_id" dev="configfs" ino=56281 res=0 errno=0 [ 605.809414][T14162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.834207][T14162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.872735][T14162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.893230][T14162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.916006][T14162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.945095][T14162] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 606.042797][T14043] mkiss: ax0: crc mode is auto. [ 606.751992][T14178] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 606.837069][T14183] netlink: get zone limit has 8 unknown bytes [ 606.869463][T14178] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 606.879825][T14182] netlink: get zone limit has 8 unknown bytes [ 607.663641][T13687] Bluetooth: hci0: command 0x0406 tx timeout [ 607.846429][T14200] netlink: 'syz.4.1802': attribute type 2 has an invalid length. [ 607.885584][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'. [ 607.903797][T13687] Bluetooth: hci2: command 0x0406 tx timeout [ 607.909861][T13687] Bluetooth: hci3: command 0x0406 tx timeout [ 607.916279][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 607.985382][T13687] Bluetooth: hci5: command 0x0c1a tx timeout [ 607.991974][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 608.049173][T14202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1803'. [ 608.162336][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 608.594677][T14211] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1806'. [ 608.759494][T14211] Process accounting resumed [ 610.064236][T13687] Bluetooth: hci5: command 0x0c1a tx timeout [ 610.815246][T14247] cougar: G6 mapped to space [ 613.255757][T14275] bond0: invalid ARP target specified [ 613.337634][T14279] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.024155][T14302] netlink: 'syz.4.1825': attribute type 2 has an invalid length. [ 614.053656][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 615.395970][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 615.411060][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 615.420712][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 615.432967][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 615.441724][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 616.102774][T14326] chnl_net:caif_netlink_parms(): no params data found [ 616.347743][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.378414][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.426621][T14326] bridge_slave_0: entered allmulticast mode [ 616.445597][T14326] bridge_slave_0: entered promiscuous mode [ 616.472237][T14326] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.496150][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.523858][T14326] bridge_slave_1: entered allmulticast mode [ 616.541734][T14326] bridge_slave_1: entered promiscuous mode [ 616.855904][T14326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.929502][T14326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.026443][T14350] binder: 14349:14350 ioctl c0306201 0 returned -14 [ 617.095764][T14326] team0: Port device team_slave_0 added [ 617.145875][T14326] team0: Port device team_slave_1 added [ 617.271575][T14352] netlink: 'syz.0.1839': attribute type 2 has an invalid length. [ 617.282025][T14326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.299599][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 617.313613][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.400622][T14326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.471301][T14326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.491648][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.543605][ T5836] Bluetooth: hci6: command tx timeout [ 617.582837][T14326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.680253][T14187] mkiss: ax0: crc mode is auto. [ 617.843301][T14326] hsr_slave_0: entered promiscuous mode [ 617.860218][T14326] hsr_slave_1: entered promiscuous mode [ 617.885105][T14326] debugfs: 'hsr0' already exists in 'hsr' [ 617.908856][T14326] Cannot create hsr debugfs directory [ 618.671622][T14369] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.750939][T14326] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 618.822445][T14373] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 618.982079][T14326] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 619.023081][T14326] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 619.160088][T14326] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 619.445966][T14326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.502652][T14326] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.555164][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.562390][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.585131][ T5836] Bluetooth: hci6: command tx timeout [ 619.595146][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 619.632930][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.640144][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.672413][T14391] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 620.232352][T14400] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 620.335544][T14395] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 620.411571][T14326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.225689][T14326] veth0_vlan: entered promiscuous mode [ 621.265832][T14326] veth1_vlan: entered promiscuous mode [ 621.376130][T14326] veth0_macvtap: entered promiscuous mode [ 621.419273][T14326] veth1_macvtap: entered promiscuous mode [ 621.531045][T14326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.667612][ T5836] Bluetooth: hci6: command tx timeout [ 621.701066][T14326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.762819][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'. [ 621.792064][ T6253] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.812356][ T6253] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.929104][ T6253] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.967877][ T6253] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.533233][ T6241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.566155][ T6241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.725629][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.753290][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.236299][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1855'. [ 623.414880][T14436] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 623.508984][T14436] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 623.744095][ T5836] Bluetooth: hci6: command tx timeout [ 625.188999][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 627.101698][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1866'. [ 628.861629][T13687] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 628.877480][T13687] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 628.887585][T13687] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 628.901163][T13687] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 628.913923][T13687] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 629.115667][T14372] mkiss: ax0: crc mode is auto. [ 629.515032][T14504] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 631.033286][T13687] Bluetooth: hci7: command tx timeout [ 631.582690][T14508] chnl_net:caif_netlink_parms(): no params data found [ 631.871329][T14528] zswap: compressor not available [ 631.969289][T14508] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.997833][T14508] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.021436][T14508] bridge_slave_0: entered allmulticast mode [ 632.036537][T14540] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 632.062998][T14508] bridge_slave_0: entered promiscuous mode [ 632.084615][T14508] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.109532][T14508] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.127288][T14508] bridge_slave_1: entered allmulticast mode [ 632.151589][T14508] bridge_slave_1: entered promiscuous mode [ 632.221381][T14508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.254292][T14508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.329979][T14508] team0: Port device team_slave_0 added [ 632.346673][T14508] team0: Port device team_slave_1 added [ 632.446363][T14508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.462325][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.522722][T14508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.566313][T14508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.584877][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.639990][T14508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.824353][T14508] hsr_slave_0: entered promiscuous mode [ 632.840990][T14508] hsr_slave_1: entered promiscuous mode [ 632.854306][T14508] debugfs: 'hsr0' already exists in 'hsr' [ 632.865269][T14508] Cannot create hsr debugfs directory [ 633.112713][T13687] Bluetooth: hci7: command tx timeout [ 633.642824][T14508] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 633.819202][T14508] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 634.181006][T14508] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 634.716258][T14508] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 634.727144][T14559] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 634.744612][T14559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 634.769080][T14559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.798600][T14559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.831039][T14559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.856081][T14559] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 634.889231][T14559] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 634.899701][T14559] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 635.101468][T14556] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 635.144482][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.150900][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.183665][T13687] Bluetooth: hci7: command tx timeout [ 635.561944][T14508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.574526][T14559] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 635.845804][T14559] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 636.057628][T14559] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 636.080267][T14508] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.088370][T14559] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 636.146606][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.153873][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.207525][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.214732][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.784052][T13687] Bluetooth: hci3: command 0x0406 tx timeout [ 636.790181][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 636.798017][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 636.864658][T13687] Bluetooth: hci6: command 0x0c1a tx timeout [ 636.872617][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 636.879527][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 636.885924][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 637.019264][T14508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.859111][T14508] veth0_vlan: entered promiscuous mode [ 637.904989][T14586] Bluetooth: hci7: command 0x0c1a tx timeout [ 637.962521][T14508] veth1_vlan: entered promiscuous mode [ 638.473026][T14508] veth0_macvtap: entered promiscuous mode [ 638.730049][T14508] veth1_macvtap: entered promiscuous mode [ 638.944083][T14586] Bluetooth: hci6: command 0x0c1a tx timeout [ 639.015037][T14508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.183183][T14508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.353586][ T6253] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.363836][ T6240] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.373228][ T6240] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.611319][ T6240] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.987252][T14586] Bluetooth: hci7: command 0x0c1a tx timeout [ 640.742573][T14599] Process accounting paused [ 641.030654][T14586] Bluetooth: hci6: command 0x0c1a tx timeout [ 641.067399][ T6259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.113866][ T6259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.252919][T14515] mkiss: ax0: crc mode is auto. [ 641.324836][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.356134][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.065080][T14586] Bluetooth: hci7: command 0x0c1a tx timeout [ 642.237183][T13251] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 642.249076][T13251] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 642.257430][T13251] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 642.270092][T13251] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 642.277905][T13251] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 643.129802][T14623] chnl_net:caif_netlink_parms(): no params data found [ 643.602751][T14623] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.636676][T14623] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.679773][T14623] bridge_slave_0: entered allmulticast mode [ 643.722961][T14623] bridge_slave_0: entered promiscuous mode [ 643.764783][T14623] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.797479][T14623] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.829300][T14623] bridge_slave_1: entered allmulticast mode [ 643.892523][T14623] bridge_slave_1: entered promiscuous mode [ 644.026566][T14623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.085247][T14623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.222583][T14623] team0: Port device team_slave_0 added [ 644.276588][T14623] team0: Port device team_slave_1 added [ 644.387387][T13251] Bluetooth: hci8: command tx timeout [ 644.434823][T14623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.464205][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.626410][T14623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.722675][T14623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.765507][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.853866][T14623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.106251][T14623] hsr_slave_0: entered promiscuous mode [ 645.126488][T14623] hsr_slave_1: entered promiscuous mode [ 645.151981][T14623] debugfs: 'hsr0' already exists in 'hsr' [ 645.175396][T14623] Cannot create hsr debugfs directory [ 646.028902][T14623] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 646.050532][T14623] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 646.072057][T14623] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 646.096280][T14623] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 646.337301][T14623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.416570][T14623] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.462806][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.470144][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.478616][T13251] Bluetooth: hci8: command tx timeout [ 646.555915][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.563111][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.591843][T14688] vivid-003: ================= START STATUS ================= [ 646.671904][T14688] vivid-003: Radio HW Seek Mode: Bounded [ 646.751403][T14623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.827097][T14688] vivid-003: Radio Programmable HW Seek: false [ 646.924831][T14694] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000081: 0000 [#1] SMP KASAN PTI [ 646.936777][T14694] KASAN: null-ptr-deref in range [0x0000000000000408-0x000000000000040f] [ 646.945218][T14694] CPU: 0 UID: 0 PID: 14694 Comm: syz.0.1904 Tainted: G I syzkaller #0 PREEMPT(full) [ 646.956174][T14694] Tainted: [I]=FIRMWARE_WORKAROUND [ 646.961296][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.971358][T14694] RIP: 0010:status_show+0x30f/0x5a0 [ 646.976611][T14694] Code: 03 80 3c 02 00 0f 85 9c 02 00 00 48 8b 9b 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 08 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 7d 02 00 00 4c 8b b3 08 04 00 00 c1 e5 04 41 bc [ 646.996302][T14694] RSP: 0018:ffffc9000b227ac0 EFLAGS: 00010206 [ 647.002409][T14694] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000fe18000 [ 647.010414][T14694] RDX: 0000000000000081 RSI: ffffffff8775143e RDI: 0000000000000408 [ 647.018455][T14694] RBP: 000000000000000f R08: 0000000000000005 R09: 0000000000000000 [ 647.026455][T14694] R10: 000000000000000f R11: 64666b636f732020 R12: ffff8880577d402d [ 647.034446][T14694] R13: ffffc9000b227b10 R14: ffff8880577d4000 R15: ffff88807db515e0 [ 647.042433][T14694] FS: 00007f068977f6c0(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 647.051398][T14694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.058006][T14694] CR2: 0000001b30f19ff8 CR3: 00000000867c2000 CR4: 00000000003526f0 [ 647.066003][T14694] Call Trace: [ 647.069288][T14694] [ 647.072225][T14694] ? __pfx_status_show+0x10/0x10 [ 647.077200][T14694] ? __pfx_status_show+0x10/0x10 [ 647.082162][T14694] dev_attr_show+0x56/0xe0 [ 647.086605][T14694] ? __pfx_dev_attr_show+0x10/0x10 [ 647.091832][T14694] sysfs_kf_seq_show+0x216/0x3e0 [ 647.096793][T14694] seq_read_iter+0x50e/0x12d0 [ 647.101539][T14694] kernfs_fop_read_iter+0x46c/0x610 [ 647.106766][T14694] ? rw_verify_area+0xcf/0x6c0 [ 647.111603][T14694] vfs_read+0x8bf/0xcf0 [ 647.115785][T14694] ? __pfx___mutex_lock+0x10/0x10 [ 647.120855][T14694] ? __pfx_vfs_read+0x10/0x10 [ 647.125555][T14694] ksys_read+0x12a/0x250 [ 647.129898][T14694] ? __pfx_ksys_read+0x10/0x10 [ 647.134680][T14694] do_syscall_64+0xcd/0xfa0 [ 647.139219][T14694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.145126][T14694] RIP: 0033:0x7f068898f7c9 [ 647.149557][T14694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.169218][T14694] RSP: 002b:00007f068977f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.177649][T14694] RAX: ffffffffffffffda RBX: 00007f0688be6270 RCX: 00007f068898f7c9 [ 647.185642][T14694] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 647.193671][T14694] RBP: 00007f0688a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 647.201698][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.209699][T14694] R13: 00007f0688be6308 R14: 00007f0688be6270 R15: 00007ffc8db867b8 [ 647.217693][T14694] [ 647.220720][T14694] Modules linked in: [ 647.227211][T14694] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 647.821277][T14688] vivid-003: RDS Rx I/O Mode: Block I/O [ 647.983628][T14688] vivid-003: Generate RBDS Instead of RDS: false [ 647.990027][T14688] vivid-003: RDS Reception: true [ 648.066724][T14688] vivid-003: RDS Program Type: 0 inactive [ 648.072518][T14688] vivid-003: RDS PS Name: inactive [ 648.143495][T14688] vivid-003: RDS Radio Text: inactive [ 648.149200][T14688] vivid-003: RDS Traffic Announcement: false inactive [ 648.217694][T14688] vivid-003: RDS Traffic Program: false inactive [ 648.252886][T14688] vivid-003: RDS Music: false inactive [ 648.293526][T14688] vivid-003: ================== END STATUS ================== [ 648.745857][T14694] RIP: 0010:status_show+0x30f/0x5a0 [ 648.752331][T14694] Code: 03 80 3c 02 00 0f 85 9c 02 00 00 48 8b 9b 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 08 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 7d 02 00 00 4c 8b b3 08 04 00 00 c1 e5 04 41 bc [ 648.772949][T14694] RSP: 0018:ffffc9000b227ac0 EFLAGS: 00010206 [ 648.779640][T14694] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000fe18000 [ 648.789999][T14694] RDX: 0000000000000081 RSI: ffffffff8775143e RDI: 0000000000000408 [ 648.802125][T14694] RBP: 000000000000000f R08: 0000000000000005 R09: 0000000000000000 [ 648.810486][T14694] R10: 000000000000000f R11: 64666b636f732020 R12: ffff8880577d402d [ 648.820030][T14694] R13: ffffc9000b227b10 R14: ffff8880577d4000 R15: ffff88807db515e0 [ 648.828604][T14694] FS: 00007f068977f6c0(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 648.837952][T14694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.846144][T14694] CR2: 0000000000000000 CR3: 00000000867c2000 CR4: 00000000003526f0 [ 648.855859][T14694] Kernel panic - not syncing: Fatal exception [ 648.862036][T14694] Kernel Offset: disabled [ 648.866480][T14694] Rebooting in 86400 seconds..