last executing test programs: 9.246588811s ago: executing program 0 (id=1335): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x2, 0x6b7f, 0x9, 0x8, 0xffffffff}) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x100) r3 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) read$auto(r0, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 8.846569421s ago: executing program 3 (id=1338): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) kill$auto(r0, 0x11) mmap$auto(0xffffffffffdffffc, 0xfcf, 0x1, 0xeb2, 0xffffffffffffffff, 0x20000007) socket(0xa, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x400000001, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x400, 0x0) r7 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r7, r7, 0x0) 8.290237601s ago: executing program 3 (id=1339): r0 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7f}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x8e86}]}, 0x3c}}, 0x4000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/clocksource/power/control\x00', 0x109400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/159, 0x9f) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000480)={r1, &(0x7f0000000280)="28a5ca300881285551f35a2ade384695454ac1098e7cbca79ec3959949dc76c7426f4b7a", 0xdbe, &(0x7f00000002c0)="0d5f39005bf0048edd667f24913e5917774683577819be21594ddf02614af78d57a323693b226842470f83174c6ac6548f1c8aa14c3334756f75083706653f422f3a440c854dae797c6d0de33c20bfd0d68648873bd7683142aeca10a62044c339f89b7687b782", 0x3, &(0x7f0000000340)="cca82a26b16595d5f13c3a4c82420f1879b4dbcc4481d37920d694aa8f749fce4c7c7c4b6e885656825ef1b6ef780aff212e2115f2ad24cc4beb834b76ae769ea2ab49af08fcd11b6460689a9274cff07735af1ec4285d5fda83cd6d11afbb28f7389ac5fbf6e31ca99ef865c9226312eadbe0d90801ca2700bbc7e1cf76e00e224fd8ebf6878a6f725a0116765e57beaf7d9be67c4ac6474e4e85700991c2d32a0a94588d4371f50eadbcfe731b51ec9b59e0b9af2befdaaf4702267fbefc74968ed6a4f9d8ba8275eed28117", &(0x7f0000000440)=0x4}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r2) syz_clone(0x3000, &(0x7f00000004c0)="2216e556fd7f17a7d6353639041fc29414548d71eb1a2ea94d745b6c5ba911a4959987d364280d40b4f6cbc9cc88bdef0ac84f7182b6f5c946a79c", 0x3b, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="c19787fd5d5f79ccc3ff9f39c54c64b6aa0fee1cb44ae5a8d739dbe3575b62baee08ef923ce3caff93645cc6b98fd5519a4183dd3bcc7456fba03d2ed352dd2d9e5d80ea2c3e698926db78c31dd5316d373db58bf82236b549523a9d938efa3d250e74123bc453421c702bbbeec15aef2cbaf5ab5827d69256e0a506bcaf38439acd5961c00fa97392a3083aa7018065ba1cf334aaa7209ee5a76d1671ded8d1ba0bb8c92b7bd1b2569e75c61c393f237b8c") r3 = clone$auto(0x9, 0x96d, &(0x7f0000000640)=0x5642, &(0x7f0000000680), 0xffffffff) ioctl$auto(r1, 0x4bf2, r2) fcntl$auto_F_OFD_SETLK(r2, 0x25, 0x7) sendfile$auto(r1, r1, &(0x7f00000006c0)=0x80000001, 0x3229) pkey_free$auto(0x63c) sendto$auto(r2, &(0x7f0000000700)="5b8cc91cfc14dcf2d2e97170fca25b2e7298cc3c8e82781e25ab43d77bcf607ddb8dd0af7c09735526574d74f22b7aa1de38d6a257c432a62b88ef952f6b7b712c36d67774509041b3c7891192bf89e93af2e5c8badbc3ea9276548d228f3dccf6c7098c90c3cae40c971d1e9bc6726fcad26acb3dce359ee59c0f591558fe", 0x4, 0x200, &(0x7f0000000780)=@llc={0x1a, 0x33a, 0x6, 0x7, 0x1, 0x19, @random="92370be5a152"}, 0x3) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f00000007c0)={0x2a8, 0x9, 0x2, 0x7e, 0xb, r3}) r5 = socket(0x21, 0x5, 0x2) r6 = socket(0x8, 0x800, 0x7) shmctl$auto_IPC_INFO(0x671, 0x3, &(0x7f00000008c0)={{0x0, 0xee01, 0xffffffffffffffff, 0x1, 0x742, 0x2, 0xd8f1}, 0xd7, 0x8, 0x6, 0x80000000, @inferred=r4, @inferred=r3, 0xd, 0x0, &(0x7f0000000800)="a3670b1cd9c5e50d7a34825384c35e1cd519b0ce0e45880e5eede47850006165211794f0698b81e542b87fd6554bb2e5069854ff5f906ca5b1fc6864b7e30b8c0b817b48593d0e8e4b5677b238b15681e4357d315ca2bf0018372f", &(0x7f0000000880)="9a4937e0eb0bb521c6215f859d0cadc1f29590bfad46846ff88bbbb5e8aa0137f60acae7592452c8f8a88389272bf949"}) shmctl$auto_SHM_UNLOCK(0x1, 0xc, &(0x7f0000000b40)={{0xd, 0xee01, 0xee01, 0x769d, 0x7, 0x7, 0x5}, 0x3, 0x6e5a, 0x61c, 0x0, @raw=0xfffffff7, @raw=0x8, 0x7, 0x0, &(0x7f0000000940)="1bfffd16edb60ae5c4079290457f0433a6cadc383ff3a1e4502eb93cff5e1fe7ca8369e315cf9305a7c101cfeffbb20831607fa76a59cbf914ef5d89e139e0a00512f898e0c9410bdb2550b48ee87e8c1abfb2387f8963e50e7dca132f721dfb56df157bced32ff4b1402bf01d8ba16e960c5b55880073c1f874f48d354ea7303c58a2741703c3a6fb06dca49aa08caee1034d0611b259ea49f5a1243f7d8f559adeb086fc85d21c000bdf74956e2bab9cdf5c56b76f38593f2de8d25da746900668c1bcfbae9f08aa858011", &(0x7f0000000a40)="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"}) fstat$auto(r2, &(0x7f0000000bc0)={0x9, 0x1, 0x86, 0x7, r7, r8, 0x0, 0x4e5a, 0x1000, 0x2, 0x2, 0x6, 0x0, 0x8000000000000000, 0x676e, 0x9, 0x4d}) open_by_handle_at$auto(r5, &(0x7f0000000c80)={0x54, 0xec1, "60b34bbc2e7e76f22b84de5640f9f1047dd22e6c657cbba0709a039399a612c8c1c97bec0a70f3242132a954320c4e9d8f48905ee9e14efbae7cce45d15e823ebdc73d7cce846cbf5497711dd0d812d6040be679"}, 0x3) rename$auto(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='./file0\x00') pkey_free$auto(0x1) r9 = open(&(0x7f0000000d80)='./file0\x00', 0x10da81, 0x2d) epoll_pwait$auto(r2, &(0x7f0000000dc0)={0xffff02ab, 0x5}, 0x81, 0x236aa7fe, &(0x7f0000000e00)={0x7fff}, 0x8) pkey_free$auto(0x2e0) pkey_free$auto(0x8) read$auto_proc_mountstats_operations_mnt_namespace(r9, &(0x7f0000000e40)=""/118, 0x76) lseek$auto(r6, 0x0, 0x4) pkey_free$auto(0xff) memfd_secret$auto(0x0) 7.916569072s ago: executing program 0 (id=1343): socket(0x18, 0x4, 0x84) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x484, 0x400, 0x9}]}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) (async) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000080)={0x6b7, 0x1, 0x1, 0x2, 0x3, 0xffffffffffffffff}) process_vm_readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180)="6c2a7b98ba3fa965cb38b35a44994d621b102d7a8bb441418b2d5b89af3430cb37a23c04dc9cb09d85527c434ed509788ae8af081d8a0dae68b921aee2589e626b745aaad90a51", 0x4e}, 0xfffffffffffffff7, &(0x7f0000000240)={&(0x7f0000000200), 0x2}, 0x9, 0x4) (async) fsconfig$auto_FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000200)=':\x00', &(0x7f0000000280)="44de992094b84005bbe18913719517e47fb4a1e7aefffcd1b205971a", 0x780000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sg1\x00', 0x412040, 0x0) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x11, 0x80003, 0x300) (async) move_pages$auto(r1, 0x1000f54, 0x0, 0x0, 0x0, 0x1) r2 = prctl$auto(0xe0004, 0x57e, 0x0, 0x939, 0x2) mmap$auto(0x8000000000000, 0x2, 0xe0, 0xebd, r2, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xc) listen$auto(r2, 0x88000003) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) epoll_create$auto(0x4) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) socket(0x11, 0x80003, 0x300) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x3, 0xa, 0xfffffffd) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/mcast_resolicit\x00', 0xaa702, 0x0) 7.45084143s ago: executing program 3 (id=1344): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/sub5/xrun_injection\x00', 0x4b0002, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r1, 0x540a, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty17\x00', 0x0, 0x0) mmap$auto(0x20000000000, 0x4, 0x3, 0x12, 0xffffffffffffffff, 0x168d) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x4) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) fspick$auto(r3, &(0x7f0000000340)='./file0\x00', 0x4a6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000180)={r2, 0x6}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20000000) clone$auto(0x3, 0x7ff, &(0x7f00000002c0)=0x81, &(0x7f0000000300)=0x8000, 0xc8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty7\x00', 0x800, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, &(0x7f00000001c0)="627bfbbbba41dbe2c99eaf1a2b7fa2c20bbd055a1cbab55d026a88bcb4570c189c1a8a13d4a7278c5d4826ab71af971b8b9fc37669bd45a2bc2e48437e87a6bff29f9d87d075abb6f2c2325e853dc4512961896f48862c98f459f61d8a694d512f88cb246eb5d60ab43f9a2ce8c759f38b0c5ca5231cf2dda69c8753781eb33ee948c9c347f77f501bc7d8ab9091485825ad0de098b7b4263cdb1b415cb9e35f992a1b4c584591f211c01eeccc57085f51e5dd9c5ad7c924820f50c8ce66ceca9f8577fbb98abc530793d3ebb1c6a000") sendmmsg$auto(r4, &(0x7f00000003c0)={{&(0x7f0000000440)="36598e06aeaf18ddab17ff03db1172a90294e593f51a81239d5a529843be941acf91b136b0876ef8b1b99afb2c9766e6d42cc393fb4127377e6017ab29f67d70b8c61c444cc84e9b58da26be2d214607fcdc17383e0f9376f3a60f1f5e5a3e6c466a6ed7926e43ee61a981a57ad8bbd7307f875a9c62157ccc19c3c2f9933df08c27b2d120094fa9babf5989ac0f172f229924c8baf7bda3e8a49750f645750724481bbd874341e478debf08fcfb9fead3d33415766f4d8e475c491951157a2ad9f879657c53d4ad2315de8db706569d9e674ddc841266237127665e5de10fbc0f", 0x12, 0x0, 0x9, 0x0, 0x1f, 0x7}, 0x80c4}, 0x7, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 6.899797739s ago: executing program 0 (id=1347): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400000000810004, 0x10000000000e43, 0x8000000008011, 0x3, 0x3) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x81, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendfile$auto(r0, r0, &(0x7f00000003c0)=0x5, 0x8) getsockopt$auto_SO_PEERSEC(r0, 0x3, 0x1f, &(0x7f0000000340)='\'\\#%]$\x88\x00', &(0x7f0000000380)=0x6) mprotect$auto(0x200000000000, 0x806121, 0x8) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000, 0xffffffffffffffff}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57699, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video30\x00', 0x2381, 0x0) ioctl$auto(r4, 0xc0845657, r4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xc0, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_RRK={0x20, 0xfc, "f7535b215629428af050095e36e7476f547b0c69f40f736a4cbcef53"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x80000001}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x7c, 0xbb, "6a83f857142a926fe738f682d0f955ea9fd0f19595f9fa32972d74831378bc06a2b55f44d5a3941cfc310c67e2d742a549ad21a5959b7973981dac8ded81fa903ee24cf5af48894b175c5fc42f51a155eee4f7b3b723f5b03a5d3666a92f69ff67855eb7a6c0ad86c30d0ebff8a95660a83854be14cb1b6b"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x81}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40050) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x800006, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x5, 0x8) keyctl$auto(0x11, 0xdfffffffffffffff, 0x69c9, 0x0, 0xbcd) socket(0x2, 0x2, 0x0) 6.875259895s ago: executing program 1 (id=1348): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) (async, rerun: 64) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async, rerun: 64) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c000280080010"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) (async, rerun: 64) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, r0) (async) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4db0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/info\x00', 0x5b5f03, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r4, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) 6.094152645s ago: executing program 0 (id=1351): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) execve$auto(0x0, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) r0 = socket(0x1e, 0x1, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(0xffffffffffffffff, 0xb00, 0x0, 0x0, 0x40) (async) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbf4250f00000093d99a5f2c91cc38f6b3e85da06fbcdf75f96a95f29a794159b21c00"], 0x30}, 0x1, 0x0, 0x0, 0x24040080}, 0x240440d4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) (async) ioctl$auto(r3, 0x8947, 0x38) (async) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r1, 0x7ff, 0x0, 0x0, 0x5) (async) open(0x0, 0x42c242, 0x18) (async) setresgid$auto(0xee00, 0xee01, 0xee00) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) 5.791912443s ago: executing program 1 (id=1352): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x2, 0x6b7f, 0x9, 0x8, 0xffffffff}) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x100) r3 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) read$auto(r0, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 5.373955778s ago: executing program 2 (id=1353): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x14) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x156) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x10, 0x2, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000040)={0xf, 0x0, r0}) mmap$auto(0x8, 0x20009, 0x6, 0xeb1, r2, 0x8000) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r3, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fanotify_init$auto(0x5, 0x2000000000002) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.988172753s ago: executing program 2 (id=1354): setxattr$auto(0x0, &(0x7f0000000200)='*\x00', 0x0, 0x800000, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto(r0, 0x92106411, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/bcachefs/parameters/verify_btree_ondisk\x00', 0x41102, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) mmap$auto(0x0, 0xc6, 0xdc, 0x17, 0x2, 0x8) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x42, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/msg_count\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/soft_connect\x00', 0xc2481, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000008dc266e311af3d3dba072173b9fa1127bb88f967373307a32e6a389170dd72e82371548585f0a22094e0187d9cd0f35a5844a76c3bb5e58cc1332283a513bccb7b223ae931d7eadab1d7345718d6306e23b00e83de5aae0ea4c22d0cd2582efde77a66d4ce2f0551d4a93bc94f01f32493f79a2349e7c17a6ddc4ff531bd41e5cf6ea6", @ANYRES16=r7, @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0xc814) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 4.815786745s ago: executing program 0 (id=1355): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2e, 0x5, 0x801000) getsockopt$auto(r0, 0x0, 0x2, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x3, 0x1) unshare$auto(0x40000080) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x2000000, 0x0, 0x20010}, 0x20040880) r3 = gettid() r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/mb_best_avail_max_trim_order\x00', 0xa401, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) process_vm_writev$auto(r3, 0x0, 0x3, 0x0, 0x4, 0x0) prctl$auto_PR_SET_MM_BRK(0x8, 0x7, 0xffffffffffffffff, 0x0, 0xfff) sendmsg$auto_TIPC_NL_PUBL_GET(r1, 0x0, 0x24000080) 3.98456381s ago: executing program 1 (id=1356): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0) 3.915017679s ago: executing program 2 (id=1357): write$auto(0xffffffffffffffff, 0x0, 0x81) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x2a, 0x2, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x2) (async) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) ioctl$auto(0x3, 0x800005411, 0x38) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) (async) bind$auto(0x3, 0x0, 0x6a) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0xd4}, 0x20000014) (async) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) (async) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8000, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) setresuid$auto(0x0, 0x7, 0x8080) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x40304}, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 3.781342155s ago: executing program 3 (id=1358): unshare$auto(0x40000080) (async) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) (async) pidfd_open$auto(0x1, 0x0) (async) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/fuse\x00', 0x9a42, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) (async) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) unshare$auto(0x40000080) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1d8d02960b6df188976b74231731fe244fca206cfc07b098a2d1d16cc9600144e957444abf7e06e45c3e09ecb12af0bca2aad17d6d9925e2ea84a3b3213c55dd044ff756c37d650da894dcd3bfa4016e5531faace3f7a6b1e1351600313912f8b15ca09433a121101b67ac430cd699d0dbd078d7166c154869f983882a0e997d06ace138764fdff818f41126027ce4f7aec"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xffffffff, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x7ff}, 0x7, 0x4008) (async) init_module$auto(0x0, 0xffff9, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) 3.30582792s ago: executing program 1 (id=1359): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x400, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = geteuid() keyctl$auto(0x1e, r2, r2, 0x5, 0x8) shmctl$auto_IPC_SET(0xb, 0x1, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x3, 0x9, 0x9f, 0x400}, 0x0, 0x6, 0x9, 0xe9e, @inferred, @inferred, 0xe2a0, 0x0, &(0x7f00000000c0)="5569c055dc42bd37f4da7b32fc23912119db805447a4ef319d", &(0x7f0000000100)="cd49aa234014f7e9296f5e699e3846bf7250b9757ed6fb5da6eb0b91fbb4f50fb82bb4d52964ba0ea2cc18b3a6e68eb8528ce7b11b49eb893be113cdaff3b223f0a0763ce1ccf3406e02ccb885cdd45d479952b6e94f397ebad42b476b8471e39c04d701999ffe1784e06d0aa7d739b24fc084c6d982f35530fb916f223e0baa4c95c2cc6ce22c2a5d5c97981533645a644965497902a3a381aac26cfd6f653db30ff994e4857961e13e93294a76beebf3a5ff7767cddfdccda3b9858d4e2cba4d7fb6a175be89f57bfe2d833977dcb3afb1730909fae4ae3cc3e25d930bd61c07c0426cc05ac4ab90330b21f9ac985338ad3379a976965545"}) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x388, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x372, 0x2, 0x0, 0x1, [@typed={0x8, 0xfe, 0x0, 0x0, @uid=r2}, @generic="9fae9db021431eb2db8dde871d402869cb8ae14ed96070bc2bef0ea216bbb2b45124ad6a80a68f7abfa2fbce87", @nested={0x118, 0xdf, 0x0, 0x1, [@nested={0x4, 0x66}, @generic="e1df6534c5f89d42a2924f22e2849a944d15a5793f2f971fe12d9f31eb42caa84bb58a90608aea4d73161c76c28bb98af05d41ec848938c5399dfaf2bff9bbd2f39cb4b9bf457b218cd836e4e7a2d901a1a7a7ca76", @generic="855b98cc5ce30c730f69d21a477c57bc9170751dd7198d7493d3efc2819c25b5ed72dbfe93f278cbc4ca79157a513f8c9c3165ce52e478a735f673292a8a0d41f1527afd5e0dad5e20d02f11b6925b1dc846604d410f73dc69adfd44ffd1b65bdbb26a53f6d629d5d7a78afe3923727a09c1cd7b8c1f9c2b65bd3df10afb56fb3ad86195d7d36c07d879fe85d95078c79814a09ee6d56e0131ca8c11ae15064833c1528f5b0d225ea222e8", @typed={0xc, 0x73, 0x0, 0x0, @u64=0xdf9}, @nested={0x4, 0x7a}]}, @typed={0x8, 0x61, 0x0, 0x0, @uid=r3}, @typed={0x43, 0xf0, 0x0, 0x0, @binary="99c2c67c0ad317e16f23abc4e7bcc2602ac009effad1121b565c2d85e8a915a42342c7236b2913e7d1b82868fd547d903ef2cda118c28c4c4505b376e5c201"}, @generic="588076d5181d72d83f1d6bf90f0eaad847d1bc5447b0d6b97e4a344c304810b2e5be25ac77b36b479c42175697c9e65a418da825ea599d810df28f536e0b78e40b87376b31ed32291f1e3458b392d2ee95fa3237b56c22f200297cd122890411100324897efbc5ae118a10f745dc5c0cc84e4700c85d1a89b56fac8f21760f0afa13de68ca54afed4058ad8cf620c02a0f9b36a950153cef509e6205aa96111c6dc16831232156a77c6043ecf6720b63137e1092a2f3c6d212080f714de548673ebc3287be971a4675d3268031a6520dd700f0552b07ebf9e4500d9edc9e40da16", @generic="cb0067a018513579a9d843ffe24b8cd58ad17ed2beaa59d3fc29c27b94f48870d726cc52661749a87c533d9cdb26c920f958326ac1688cc962ae46f097ba2175cac686d217243640de2bfd05c19de9d982a11825563f0f2f093daf7413941990d605a3890a49d3a2211eff2a08fb27ada813b9266a8e2100113860a64cdc9484ee9ebc5b71bbfda7198d0e76f5ac08fc8b179ac4c6956a7e02edb395bf180ecbc6a1e00edfe66b3dfe44b41bb547a8a1353637dc189db544240c54258574e59cf3c917df92d1482471a705775a21d062c508a6cf085d9ed71541e9ca4f072410", @typed={0x11, 0xd, 0x0, 0x0, @str='/dev/video47\x00'}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x4840}, 0x800) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video47\x00', 0x380, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) 2.9559171s ago: executing program 2 (id=1360): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='-', 0x1) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) close_range$auto(0xffffffffffffffff, r0, 0x2abc) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) (async) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) (async) listen$auto(0xffffffffffffffff, 0xffffffff) ioctl$auto(0x3, 0x5411, 0x10000000000402) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) madvise$auto(0x110c230000, 0x8031ca, 0x9) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r5) (async) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="210b2abd7000fedbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 2.181973903s ago: executing program 2 (id=1361): ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) (async) unshare$auto(0x40000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$auto_SO_ERROR(r0, 0xa12c, 0x4, &(0x7f0000000140)='ovs_flow\x00', 0x7bbf3c71) socket(0x848000000015, 0x805, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) (async) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41c8e4d5018fca6b1643fc"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x100000}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd43a6ac90df250300000004000800140001800800028004001d80080003"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x5, 0x1, 0x8, 0x0) (async) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) pipe$auto(&(0x7f0000000000)=r3) 2.122510025s ago: executing program 1 (id=1362): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x3, 0x8, 0x0, 0x44) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x690800, 0x0) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x38f) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_set$auto(0x3, 0x0, 0x4b34) msgget$auto(0x6, 0xfffffffe) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000380)='./file0\x00') fallocate$auto(0x8000000000000003, 0x0, 0xb6, 0x9) 967.27419ms ago: executing program 0 (id=1363): mmap$auto(0x0, 0x4, 0x4000000000d7, 0x40eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x3, 0x2, 0xffffffffffffffff, 0x8000000000000004, 0x2) ioctl$auto_FS_IOC_ENABLE_VERITY3(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x6, 0xf, 0x2, 0x1, 0xa, 0x0, 0x100000000001}) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xdb91) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) msgctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000001b40)={{0x3, 0xee01, 0xffffffffffffffff, 0x4, 0x8, 0x6477, 0xdcb}, 0x0, 0x0, 0x9b75, 0xfffffffffffffff2, 0x1, 0x2, 0x3, 0x32, 0x1f, 0xcc00, @inferred=0xffffffffffffffff, @raw=0x7}) madvise$auto(0x0, 0x8000000000000000, 0x15) mprotect$auto(0x200000000000, 0x806121, 0x8) unshare$auto(0x0) r1 = socket(0xa, 0x5, 0x0) mmap$auto(0x3, 0xd668, 0x3, 0x13, 0xffffffffffffffff, 0x7fff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x488601, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x732b, 0x8, 0x2}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x109, 0xffb, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @inferred, @inferred=0xffffffffffffffff}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181480, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfdef) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x40}, 0xc) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) 399.915328ms ago: executing program 3 (id=1364): madvise$auto(0x0, 0x2000040080000004, 0xe) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r1, 0x0, 0x40000000f42c, 0x80002) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) (async) mmap$auto(0x0, 0xeb1f, 0xdab7c34, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async, rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) io_uring_setup$auto(0x23, 0x0) (async) ioctl$auto_IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0x1, 0x10000003, 0x1000025}) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r3, 0x40045702, &(0x7f0000000040)=0x7fffffff) (async, rerun: 32) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0xaa, 0xb, 0x1, 0x5, "e7227115127a1e8f00"}) (async, rerun: 32) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xff, 0x0, @raw=0xfffff00c}}) socket(0x25, 0x5, 0x6) 246.521976ms ago: executing program 1 (id=1365): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x2, 0x6b7f, 0x9, 0x8, 0xffffffff}) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x100) r3 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) read$auto(r0, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 194.310998ms ago: executing program 3 (id=1366): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x63a2) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev3\x00', 0x16ba00, 0x0) ioctl$auto(r0, 0x800004, r0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x40c041, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/4/type\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0xc01) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="28000002", @ANYRES16=r3, @ANYBLOB="0100253d7000fddbdf2501000000080007808fb3bdb20c0002000600000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) setfsgid$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a25, 0x8c6, 0xe, 0x2000000003, 0x66a) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0xd, 0x24, &(0x7f0000000100)=']}&##/\'.\x00', 0x6) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) 0s ago: executing program 2 (id=1367): socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VERSION={0xd, 0x1, '\\\'!\'%+c]['}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000e60003800800c000e000000204002a000400110008002e00", @ANYRES32=0x0, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x22) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 99.238556][ T5852] cgroup: Unknown subsys name 'net' [ 99.366816][ T5852] cgroup: Unknown subsys name 'cpuset' [ 99.376531][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.347459][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.214260][ T92] cfg80211: failed to load regulatory.db [ 103.938329][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.946855][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.954573][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.957384][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.970146][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.973190][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.979738][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.993562][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.993969][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.009279][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.019118][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.026300][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.034196][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.039448][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.050248][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.054659][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.065223][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.088774][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.128751][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.137659][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.638789][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 104.745600][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 104.834024][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.841827][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.850229][ T5867] bridge_slave_0: entered allmulticast mode [ 104.858483][ T5867] bridge_slave_0: entered promiscuous mode [ 104.904908][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 104.916931][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.924498][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.931700][ T5867] bridge_slave_1: entered allmulticast mode [ 104.939282][ T5867] bridge_slave_1: entered promiscuous mode [ 105.077053][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.096294][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.138479][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 105.191902][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.199213][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.206948][ T5868] bridge_slave_0: entered allmulticast mode [ 105.216012][ T5868] bridge_slave_0: entered promiscuous mode [ 105.232714][ T5867] team0: Port device team_slave_0 added [ 105.247965][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.255468][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.263485][ T5868] bridge_slave_1: entered allmulticast mode [ 105.270925][ T5868] bridge_slave_1: entered promiscuous mode [ 105.309214][ T5867] team0: Port device team_slave_1 added [ 105.383085][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.396971][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.406850][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.414256][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.421524][ T5875] bridge_slave_0: entered allmulticast mode [ 105.429805][ T5875] bridge_slave_0: entered promiscuous mode [ 105.491316][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.499135][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.507137][ T5875] bridge_slave_1: entered allmulticast mode [ 105.515151][ T5875] bridge_slave_1: entered promiscuous mode [ 105.536357][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.543710][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.569803][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.608081][ T5868] team0: Port device team_slave_0 added [ 105.634605][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.641608][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.668154][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.695612][ T5868] team0: Port device team_slave_1 added [ 105.701874][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.709829][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.717263][ T5869] bridge_slave_0: entered allmulticast mode [ 105.724937][ T5869] bridge_slave_0: entered promiscuous mode [ 105.735668][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.748869][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.780919][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.788494][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.795850][ T5869] bridge_slave_1: entered allmulticast mode [ 105.803811][ T5869] bridge_slave_1: entered promiscuous mode [ 105.887063][ T5875] team0: Port device team_slave_0 added [ 105.893887][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.900872][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.927193][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.940162][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.947196][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.974560][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.015436][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.030604][ T5867] hsr_slave_0: entered promiscuous mode [ 106.038005][ T5867] hsr_slave_1: entered promiscuous mode [ 106.047314][ T5875] team0: Port device team_slave_1 added [ 106.058070][ T5876] Bluetooth: hci0: command tx timeout [ 106.079639][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.135511][ T5876] Bluetooth: hci1: command tx timeout [ 106.135518][ T5870] Bluetooth: hci2: command tx timeout [ 106.136587][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.154349][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.180930][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.197114][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.204214][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.230334][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.232840][ T5876] Bluetooth: hci3: command tx timeout [ 106.244171][ T5869] team0: Port device team_slave_0 added [ 106.291849][ T5869] team0: Port device team_slave_1 added [ 106.356856][ T5868] hsr_slave_0: entered promiscuous mode [ 106.363475][ T5868] hsr_slave_1: entered promiscuous mode [ 106.369726][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 106.376260][ T5868] Cannot create hsr debugfs directory [ 106.421050][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.428305][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.454964][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.496335][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.503691][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.530338][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.547963][ T5875] hsr_slave_0: entered promiscuous mode [ 106.554650][ T5875] hsr_slave_1: entered promiscuous mode [ 106.560793][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 106.566611][ T5875] Cannot create hsr debugfs directory [ 106.823828][ T5869] hsr_slave_0: entered promiscuous mode [ 106.830296][ T5869] hsr_slave_1: entered promiscuous mode [ 106.837434][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 106.844198][ T5869] Cannot create hsr debugfs directory [ 107.066687][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.088944][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.114802][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.143472][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.241247][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.259465][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.272315][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.314808][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.389127][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.413017][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.427135][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.452043][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.591286][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.604073][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.618921][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.636757][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.755389][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.781575][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.856620][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.884834][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.895657][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.911640][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.919058][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.957951][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.965119][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.977452][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.984778][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.004647][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.037271][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.055925][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.063155][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.079744][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.086921][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.133578][ T5876] Bluetooth: hci0: command tx timeout [ 108.150563][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.157765][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.196285][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.212624][ T5876] Bluetooth: hci2: command tx timeout [ 108.212695][ T5870] Bluetooth: hci1: command tx timeout [ 108.252138][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.259570][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.292900][ T5870] Bluetooth: hci3: command tx timeout [ 108.326081][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.333349][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.847355][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.987819][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.019806][ T5868] veth0_vlan: entered promiscuous mode [ 109.046491][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.066606][ T5868] veth1_vlan: entered promiscuous mode [ 109.146190][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.168520][ T5868] veth0_macvtap: entered promiscuous mode [ 109.205907][ T5868] veth1_macvtap: entered promiscuous mode [ 109.221458][ T5867] veth0_vlan: entered promiscuous mode [ 109.236811][ T5869] veth0_vlan: entered promiscuous mode [ 109.258317][ T5867] veth1_vlan: entered promiscuous mode [ 109.278617][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.291846][ T5869] veth1_vlan: entered promiscuous mode [ 109.334566][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.355169][ T5875] veth0_vlan: entered promiscuous mode [ 109.380671][ T73] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.391511][ T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.413943][ T73] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.424916][ T73] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.462829][ T5869] veth0_macvtap: entered promiscuous mode [ 109.475603][ T5867] veth0_macvtap: entered promiscuous mode [ 109.496117][ T5875] veth1_vlan: entered promiscuous mode [ 109.512033][ T5869] veth1_macvtap: entered promiscuous mode [ 109.526072][ T5867] veth1_macvtap: entered promiscuous mode [ 109.579991][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.615519][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.628395][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.673210][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.696420][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.717115][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.727912][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.739686][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.775200][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.784326][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.816449][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.818726][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.827123][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.843758][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.854930][ T5875] veth0_macvtap: entered promiscuous mode [ 109.877067][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.898399][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.911524][ T5875] veth1_macvtap: entered promiscuous mode [ 110.000828][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.028965][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.045984][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.057535][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.072133][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.121453][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.155826][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.167504][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.211637][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.222387][ T5870] Bluetooth: hci0: command tx timeout [ 110.286730][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.297182][ T5870] Bluetooth: hci1: command tx timeout [ 110.299421][ T5876] Bluetooth: hci2: command tx timeout [ 110.309826][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.339574][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.365752][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.374967][ T5876] Bluetooth: hci3: command tx timeout [ 110.466195][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.506981][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.598841][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.632064][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.665244][ T5958] FAULT_INJECTION: forcing a failure. [ 110.665244][ T5958] name failslab, interval 1, probability 0, space 0, times 1 [ 110.679466][ T5958] CPU: 1 UID: 0 PID: 5958 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 110.679507][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.679531][ T5958] Call Trace: [ 110.679545][ T5958] [ 110.679557][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 110.679618][ T5958] should_fail_ex+0x512/0x640 [ 110.679670][ T5958] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 110.679717][ T5958] should_failslab+0xc2/0x120 [ 110.679764][ T5958] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 110.679806][ T5958] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 110.679857][ T5958] acpi_ut_create_generic_state+0x5c/0xb0 [ 110.679899][ T5958] acpi_ps_init_scope+0x1a/0x1c0 [ 110.679950][ T5958] acpi_ds_init_aml_walk+0x1d9/0x590 [ 110.680010][ T5958] acpi_ps_execute_method+0x32d/0xb30 [ 110.680068][ T5958] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 110.680107][ T5958] acpi_ns_evaluate+0x76c/0xca0 [ 110.680141][ T5958] ? kasan_save_track+0x14/0x30 [ 110.680185][ T5958] acpi_evaluate_object+0x1fa/0xa90 [ 110.680244][ T5958] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 110.680290][ T5958] ? __mutex_trylock_common+0xe9/0x250 [ 110.680346][ T5958] acpi_evaluate_integer+0xdd/0x200 [ 110.680407][ T5958] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 110.680463][ T5958] ? __pfx_status_show+0x10/0x10 [ 110.680507][ T5958] status_show+0xa0/0x120 [ 110.680550][ T5958] ? __pfx_status_show+0x10/0x10 [ 110.680605][ T5958] dev_attr_show+0x56/0xe0 [ 110.680640][ T5958] ? __pfx_dev_attr_show+0x10/0x10 [ 110.680669][ T5958] sysfs_kf_seq_show+0x216/0x3e0 [ 110.680714][ T5958] seq_read_iter+0x509/0x12c0 [ 110.680764][ T5958] kernfs_fop_read_iter+0x46c/0x610 [ 110.680796][ T5958] ? rw_verify_area+0xcf/0x6c0 [ 110.680831][ T5958] vfs_read+0x8bc/0xcf0 [ 110.680874][ T5958] ? __pfx___mutex_lock+0x10/0x10 [ 110.680924][ T5958] ? __pfx_vfs_read+0x10/0x10 [ 110.680987][ T5958] ksys_read+0x12a/0x250 [ 110.681024][ T5958] ? __pfx_ksys_read+0x10/0x10 [ 110.681073][ T5958] do_syscall_64+0xcd/0x4c0 [ 110.681127][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.681159][ T5958] RIP: 0033:0x7f040878eba9 [ 110.681193][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.681224][ T5958] RSP: 002b:00007f04095ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.681261][ T5958] RAX: ffffffffffffffda RBX: 00007f04089d5fa0 RCX: 00007f040878eba9 [ 110.681281][ T5958] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 110.681299][ T5958] RBP: 00007f0408811e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.681317][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.681334][ T5958] R13: 00007f04089d6038 R14: 00007f04089d5fa0 R15: 00007ffcdcbe1b68 [ 110.681375][ T5958] [ 110.682061][ T5954] Zero length message leads to an empty skb [ 110.700358][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.826257][ T5958] netlink: zone id is out of range [ 110.835451][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.863794][ T5958] netlink: zone id is out of range [ 111.020251][ T5958] netlink: zone id is out of range [ 111.026039][ T5958] netlink: zone id is out of range [ 111.031198][ T5958] netlink: zone id is out of range [ 111.036446][ T5958] netlink: zone id is out of range [ 111.042189][ T5958] netlink: zone id is out of range [ 111.047426][ T5958] netlink: zone id is out of range [ 111.072700][ T5958] netlink: zone id is out of range [ 111.081780][ T5958] netlink: zone id is out of range [ 111.204416][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5'. [ 111.334972][ T5967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.293000][ T5876] Bluetooth: hci0: command tx timeout [ 112.372952][ T5876] Bluetooth: hci2: command tx timeout [ 112.374680][ T5870] Bluetooth: hci1: command tx timeout [ 112.462630][ T5870] Bluetooth: hci3: command tx timeout [ 112.523915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.548677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.702598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.741065][ T5990] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 112.753579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.764448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.893808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.334629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.547461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.556606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.573842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 113.630933][ T5997] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 114.694320][ T6018] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.727175][ T6012] FAULT_INJECTION: forcing a failure. [ 114.727175][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 114.751325][ T6018] FAULT_INJECTION: forcing a failure. [ 114.751325][ T6018] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.752819][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 114.752865][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.752887][ T6012] Call Trace: [ 114.752899][ T6012] [ 114.752913][ T6012] dump_stack_lvl+0x16c/0x1f0 [ 114.752975][ T6012] should_fail_ex+0x512/0x640 [ 114.753034][ T6012] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 114.753084][ T6012] should_failslab+0xc2/0x120 [ 114.753134][ T6012] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 114.753179][ T6012] ? seq_open+0x55/0x170 [ 114.753237][ T6012] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 114.753280][ T6012] seq_open+0x55/0x170 [ 114.753331][ T6012] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 114.753373][ T6012] single_open+0xfc/0x1f0 [ 114.753430][ T6012] tracing_trace_options_open+0xa7/0x100 [ 114.753489][ T6012] do_dentry_open+0x982/0x1530 [ 114.753536][ T6012] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 114.753600][ T6012] vfs_open+0x82/0x3f0 [ 114.753672][ T6012] path_openat+0x1de4/0x2cb0 [ 114.753781][ T6012] ? __pfx_path_openat+0x10/0x10 [ 114.753839][ T6012] do_filp_open+0x20b/0x470 [ 114.753884][ T6012] ? __pfx_do_filp_open+0x10/0x10 [ 114.753963][ T6012] ? alloc_fd+0x471/0x7d0 [ 114.754015][ T6012] do_sys_openat2+0x11b/0x1d0 [ 114.754071][ T6012] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.754147][ T6012] __x64_sys_openat+0x174/0x210 [ 114.754180][ T6012] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.754231][ T6012] do_syscall_64+0xcd/0x4c0 [ 114.754293][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.754332][ T6012] RIP: 0033:0x7f144cd8eba9 [ 114.754363][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.754397][ T6012] RSP: 002b:00007f144dbd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.754432][ T6012] RAX: ffffffffffffffda RBX: 00007f144cfd5fa0 RCX: 00007f144cd8eba9 [ 114.754455][ T6012] RDX: 0000000000084100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 114.754479][ T6012] RBP: 00007f144ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 114.754501][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.754521][ T6012] R13: 00007f144cfd6038 R14: 00007f144cfd5fa0 R15: 00007ffe0b209a08 [ 114.754567][ T6012] [ 115.038864][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT(full) [ 115.038907][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.038926][ T6018] Call Trace: [ 115.038937][ T6018] [ 115.038949][ T6018] dump_stack_lvl+0x16c/0x1f0 [ 115.039005][ T6018] should_fail_ex+0x512/0x640 [ 115.039063][ T6018] _copy_from_user+0x2e/0xd0 [ 115.039100][ T6018] ____sys_sendmsg+0x607/0xc70 [ 115.039142][ T6018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.039196][ T6018] ___sys_sendmsg+0x134/0x1d0 [ 115.039247][ T6018] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.039314][ T6018] ? find_held_lock+0x2b/0x80 [ 115.039368][ T6018] __sys_sendmmsg+0x200/0x420 [ 115.039421][ T6018] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.039481][ T6018] ? __pfx_do_futex+0x10/0x10 [ 115.039546][ T6018] ? xfd_validate_state+0x61/0x180 [ 115.039603][ T6018] __x64_sys_sendmmsg+0x9c/0x100 [ 115.039648][ T6018] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.039702][ T6018] do_syscall_64+0xcd/0x4c0 [ 115.039751][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.039787][ T6018] RIP: 0033:0x7f040878eba9 [ 115.039812][ T6018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.039847][ T6018] RSP: 002b:00007f04095ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.039878][ T6018] RAX: ffffffffffffffda RBX: 00007f04089d5fa0 RCX: 00007f040878eba9 [ 115.039899][ T6018] RDX: 00000000fffffffd RSI: 0000200000000200 RDI: 0000000000000006 [ 115.039919][ T6018] RBP: 00007f0408811e19 R08: 0000000000000000 R09: 0000000000000000 [ 115.039938][ T6018] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 115.039957][ T6018] R13: 00007f04089d6038 R14: 00007f04089d5fa0 R15: 00007ffcdcbe1b68 [ 115.039997][ T6018] [ 118.695568][ T6059] FAULT_INJECTION: forcing a failure. [ 118.695568][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 118.778150][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.2.23 Not tainted syzkaller #0 PREEMPT(full) [ 118.778196][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.778227][ T6059] Call Trace: [ 118.778238][ T6059] [ 118.778251][ T6059] dump_stack_lvl+0x16c/0x1f0 [ 118.778321][ T6059] should_fail_ex+0x512/0x640 [ 118.778374][ T6059] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 118.778415][ T6059] should_failslab+0xc2/0x120 [ 118.778472][ T6059] __kmalloc_cache_noprof+0x6a/0x3e0 [ 118.778506][ T6059] ? do_raw_spin_lock+0x12c/0x2b0 [ 118.778560][ T6059] ? single_open+0x4d/0x1f0 [ 118.778615][ T6059] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 118.778655][ T6059] single_open+0x4d/0x1f0 [ 118.778706][ T6059] tracing_trace_options_open+0xa7/0x100 [ 118.778760][ T6059] do_dentry_open+0x982/0x1530 [ 118.778803][ T6059] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 118.778861][ T6059] vfs_open+0x82/0x3f0 [ 118.778917][ T6059] path_openat+0x1de4/0x2cb0 [ 118.778972][ T6059] ? __pfx_path_openat+0x10/0x10 [ 118.779024][ T6059] do_filp_open+0x20b/0x470 [ 118.779066][ T6059] ? __pfx_do_filp_open+0x10/0x10 [ 118.779137][ T6059] ? alloc_fd+0x471/0x7d0 [ 118.779186][ T6059] do_sys_openat2+0x11b/0x1d0 [ 118.779238][ T6059] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.779308][ T6059] __x64_sys_openat+0x174/0x210 [ 118.779339][ T6059] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.779386][ T6059] do_syscall_64+0xcd/0x4c0 [ 118.779450][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.779485][ T6059] RIP: 0033:0x7f040878eba9 [ 118.779517][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.779549][ T6059] RSP: 002b:00007f04095ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.779586][ T6059] RAX: ffffffffffffffda RBX: 00007f04089d5fa0 RCX: 00007f040878eba9 [ 118.779607][ T6059] RDX: 0000000000084100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 118.779628][ T6059] RBP: 00007f0408811e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.779647][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.779665][ T6059] R13: 00007f04089d6038 R14: 00007f04089d5fa0 R15: 00007ffcdcbe1b68 [ 118.779708][ T6059] [ 119.226035][ T6062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'. [ 119.292680][ T6074] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.711800][ T6082] syz.0.34 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.222105][ T6091] FAULT_INJECTION: forcing a failure. [ 120.222105][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 120.302443][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) [ 120.302483][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.302501][ T6091] Call Trace: [ 120.302511][ T6091] [ 120.302523][ T6091] dump_stack_lvl+0x16c/0x1f0 [ 120.302573][ T6091] should_fail_ex+0x512/0x640 [ 120.302626][ T6091] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 120.302665][ T6091] should_failslab+0xc2/0x120 [ 120.302703][ T6091] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 120.302737][ T6091] ? acpi_ut_create_thread_state+0x63/0x170 [ 120.302779][ T6091] acpi_ut_create_thread_state+0x63/0x170 [ 120.302816][ T6091] acpi_ps_parse_aml+0x79/0xcb0 [ 120.302862][ T6091] acpi_ps_execute_method+0x55a/0xb30 [ 120.302907][ T6091] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 120.302940][ T6091] acpi_ns_evaluate+0x76c/0xca0 [ 120.302968][ T6091] ? kasan_save_track+0x14/0x30 [ 120.303004][ T6091] acpi_evaluate_object+0x1fa/0xa90 [ 120.303040][ T6091] ? htb_change_class+0x751/0x33b0 [ 120.303078][ T6091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.303109][ T6091] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 120.303145][ T6091] ? __mutex_trylock_common+0xe9/0x250 [ 120.303192][ T6091] acpi_evaluate_integer+0xdd/0x200 [ 120.303225][ T6091] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 120.303273][ T6091] ? __pfx_status_show+0x10/0x10 [ 120.303311][ T6091] status_show+0xa0/0x120 [ 120.303360][ T6091] ? __pfx_status_show+0x10/0x10 [ 120.303409][ T6091] dev_attr_show+0x56/0xe0 [ 120.303438][ T6091] ? __pfx_dev_attr_show+0x10/0x10 [ 120.303464][ T6091] sysfs_kf_seq_show+0x216/0x3e0 [ 120.303503][ T6091] seq_read_iter+0x509/0x12c0 [ 120.303547][ T6091] kernfs_fop_read_iter+0x46c/0x610 [ 120.303574][ T6091] ? rw_verify_area+0xcf/0x6c0 [ 120.303609][ T6091] vfs_read+0x8bc/0xcf0 [ 120.303645][ T6091] ? __pfx___mutex_lock+0x10/0x10 [ 120.303689][ T6091] ? __pfx_vfs_read+0x10/0x10 [ 120.303746][ T6091] ksys_read+0x12a/0x250 [ 120.303778][ T6091] ? __pfx_ksys_read+0x10/0x10 [ 120.303820][ T6091] do_syscall_64+0xcd/0x4c0 [ 120.303866][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.303893][ T6091] RIP: 0033:0x7f8d5858eba9 [ 120.303916][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.303955][ T6091] RSP: 002b:00007f8d5948f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.303980][ T6091] RAX: ffffffffffffffda RBX: 00007f8d587d5fa0 RCX: 00007f8d5858eba9 [ 120.303997][ T6091] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 120.304013][ T6091] RBP: 00007f8d58611e19 R08: 0000000000000000 R09: 0000000000000000 [ 120.304029][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.304045][ T6091] R13: 00007f8d587d6038 R14: 00007f8d587d5fa0 R15: 00007ffe3a81ba18 [ 120.304081][ T6091] [ 120.309534][ T6091] ACPI Error: [ 120.605365][ T6092] net_ratelimit: 1 callbacks suppressed [ 120.605383][ T6092] netlink: zone id is out of range [ 120.642994][ T6092] netlink: zone id is out of range [ 120.656919][ T6092] netlink: zone id is out of range [ 120.684464][ T6091] ffff888076313000 walk still has a scope list (20250404/dswstate-694) [ 120.687256][ T6092] netlink: zone id is out of range [ 120.715495][ T6092] netlink: zone id is out of range [ 120.744746][ T6092] netlink: zone id is out of range [ 120.778501][ T6092] netlink: zone id is out of range [ 120.792834][ T6092] netlink: zone id is out of range [ 120.853894][ T6092] netlink: zone id is out of range [ 120.859095][ T6092] netlink: zone id is out of range [ 121.241336][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 121.541021][ T6099] binder: 6097:6099 ioctl c0046209 ffffffffffffffff returned -22 [ 123.516296][ T6129] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 123.762530][ T6136] FAULT_INJECTION: forcing a failure. [ 123.762530][ T6136] name failslab, interval 1, probability 0, space 0, times 0 [ 123.877605][ T6136] CPU: 1 UID: 0 PID: 6136 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 123.877652][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.877671][ T6136] Call Trace: [ 123.877682][ T6136] [ 123.877695][ T6136] dump_stack_lvl+0x16c/0x1f0 [ 123.877752][ T6136] should_fail_ex+0x512/0x640 [ 123.877805][ T6136] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 123.877852][ T6136] should_failslab+0xc2/0x120 [ 123.877897][ T6136] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 123.877938][ T6136] ? acpi_ut_create_thread_state+0x63/0x170 [ 123.877991][ T6136] acpi_ut_create_thread_state+0x63/0x170 [ 123.878036][ T6136] acpi_ps_parse_aml+0x79/0xcb0 [ 123.878103][ T6136] acpi_ps_execute_method+0x55a/0xb30 [ 123.878159][ T6136] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 123.878199][ T6136] acpi_ns_evaluate+0x76c/0xca0 [ 123.878233][ T6136] ? kasan_save_track+0x14/0x30 [ 123.878276][ T6136] acpi_evaluate_object+0x1fa/0xa90 [ 123.878320][ T6136] ? htb_change_class+0x751/0x33b0 [ 123.878367][ T6136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.878405][ T6136] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 123.878450][ T6136] ? __mutex_trylock_common+0xe9/0x250 [ 123.878504][ T6136] acpi_evaluate_integer+0xdd/0x200 [ 123.878544][ T6136] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 123.878604][ T6136] ? __pfx_status_show+0x10/0x10 [ 123.878649][ T6136] status_show+0xa0/0x120 [ 123.878696][ T6136] ? __pfx_status_show+0x10/0x10 [ 123.878755][ T6136] dev_attr_show+0x56/0xe0 [ 123.878791][ T6136] ? __pfx_dev_attr_show+0x10/0x10 [ 123.878823][ T6136] sysfs_kf_seq_show+0x216/0x3e0 [ 123.878871][ T6136] seq_read_iter+0x509/0x12c0 [ 123.878926][ T6136] kernfs_fop_read_iter+0x46c/0x610 [ 123.878961][ T6136] ? rw_verify_area+0xcf/0x6c0 [ 123.878999][ T6136] vfs_read+0x8bc/0xcf0 [ 123.879052][ T6136] ? __pfx___mutex_lock+0x10/0x10 [ 123.879108][ T6136] ? __pfx_vfs_read+0x10/0x10 [ 123.879177][ T6136] ksys_read+0x12a/0x250 [ 123.879216][ T6136] ? __pfx_ksys_read+0x10/0x10 [ 123.879270][ T6136] do_syscall_64+0xcd/0x4c0 [ 123.879327][ T6136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.879361][ T6136] RIP: 0033:0x7efcf798eba9 [ 123.879388][ T6136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.879420][ T6136] RSP: 002b:00007efcf8771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.879451][ T6136] RAX: ffffffffffffffda RBX: 00007efcf7bd5fa0 RCX: 00007efcf798eba9 [ 123.879473][ T6136] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 123.879493][ T6136] RBP: 00007efcf7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 123.879512][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.879530][ T6136] R13: 00007efcf7bd6038 R14: 00007efcf7bd5fa0 R15: 00007ffe74404828 [ 123.879575][ T6136] [ 123.879641][ T6136] ACPI Error: ffff888076218000 walk still has a scope list (20250404/dswstate-694) [ 124.601611][ T6132] FAULT_INJECTION: forcing a failure. [ 124.601611][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 124.629751][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT(full) [ 124.629783][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.629797][ T6132] Call Trace: [ 124.629805][ T6132] [ 124.629814][ T6132] dump_stack_lvl+0x16c/0x1f0 [ 124.629856][ T6132] should_fail_ex+0x512/0x640 [ 124.629895][ T6132] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 124.629927][ T6132] should_failslab+0xc2/0x120 [ 124.629960][ T6132] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 124.630000][ T6132] ? seq_open+0x55/0x170 [ 124.630038][ T6132] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 124.630067][ T6132] seq_open+0x55/0x170 [ 124.630100][ T6132] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 124.630128][ T6132] single_open+0xfc/0x1f0 [ 124.630164][ T6132] tracing_trace_options_open+0xa7/0x100 [ 124.630201][ T6132] do_dentry_open+0x982/0x1530 [ 124.630234][ T6132] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 124.630275][ T6132] vfs_open+0x82/0x3f0 [ 124.630314][ T6132] path_openat+0x1de4/0x2cb0 [ 124.630351][ T6132] ? __pfx_path_openat+0x10/0x10 [ 124.630387][ T6132] do_filp_open+0x20b/0x470 [ 124.630416][ T6132] ? __pfx_do_filp_open+0x10/0x10 [ 124.630465][ T6132] ? alloc_fd+0x471/0x7d0 [ 124.630498][ T6132] do_sys_openat2+0x11b/0x1d0 [ 124.630534][ T6132] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.630583][ T6132] __x64_sys_openat+0x174/0x210 [ 124.630604][ T6132] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.630636][ T6132] do_syscall_64+0xcd/0x4c0 [ 124.630676][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.630701][ T6132] RIP: 0033:0x7f8d5858eba9 [ 124.630720][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.630743][ T6132] RSP: 002b:00007f8d5948f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.630772][ T6132] RAX: ffffffffffffffda RBX: 00007f8d587d5fa0 RCX: 00007f8d5858eba9 [ 124.630791][ T6132] RDX: 0000000000084100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 124.630811][ T6132] RBP: 00007f8d58611e19 R08: 0000000000000000 R09: 0000000000000000 [ 124.630829][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.630848][ T6132] R13: 00007f8d587d6038 R14: 00007f8d587d5fa0 R15: 00007ffe3a81ba18 [ 124.630889][ T6132] [ 125.555479][ T6158] random: crng reseeded on system resumption [ 125.871412][ T5870] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 125.871457][ T5870] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 125.887244][ T5870] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 125.887295][ T5870] Bluetooth: hci2: adv larger than maximum supported [ 125.895363][ T5870] Bluetooth: hci2: Malformed LE Event: 0x0d [ 127.701746][ T30] audit: type=1326 audit(1758129628.454:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.0.47" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efcf798eba9 code=0x0 [ 127.825891][ T6182] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.675624][ T6219] zswap: compressor 000 not available [ 131.324878][ T6279] net_ratelimit: 12 callbacks suppressed [ 131.324897][ T6279] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 132.175558][ T6286] netlink: 338 bytes leftover after parsing attributes in process `syz.2.71'.