last executing test programs: 12.836153728s ago: executing program 1 (id=195): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) recvfrom$auto(r0, &(0x7f0000000440)="fb14500936043b01fbab95d09b54f3681d630da50b51687ab87b8e9b5abc2f7caedf7a6cf2a0c4ef8edaa9595397fcb34ec1d46a93b778f96717c7f1325a0b2744e2059b32a4c9be6d0852d25a9aaad3ca8f244506fd4e575d31e9e263ad40293baedee529c8a54e8349b58dd5cfdebc113fb494778f0bb13bbf18d5a3c2a30098decae4c394ec08ca1a", 0x5, 0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, &(0x7f00000000c0)=0x10000) read$auto(0x3, 0x0, 0x7) fallocate$auto(0xffffffffffffffff, 0x40, 0x80000000000010, 0xdbd60) write$auto(0xffffffffffffffff, 0x0, 0x2) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) write$auto(0xffffffffffffffff, &(0x7f0000000900)='j\xa2\xb1\n\xb4\xd3\x00\x00\x00\x00\x8e\xc4\x97\x8a\x10\xd5<\xa7J\xb1\x00$\xd6\xfd\xca}\xa3\v\xfc7\x93S8\x02\x88pmh\x14\x86p\x04\\8\xe1|\xa8s\xa7\xdbLq\x0e\xdb\xa7\xb3\x94R\xb3D0\xf1Uf\a\x9f4\xb0\x957\xa6\xcd\xeb\x87^I\xf4\x0f\x18\x80h\xaau\x94\x1c\xd1\xb1c\xafZ\xb1\xf3\v\xd5\x1f\x14\x8c\x1bi\x90\xc8[\xecE\xfdwm\xb6\xf1Wj\xab\xfcIU\xce9\b\xcc\xfc&G*\xe5\x96\x91x\x93}$\x813*\xd4\x16\'w\xad<\xf6\xb1\xd2\xe5\xc3\x19\xfb\x15\xd5U\x80BL\xd8\x19\'\x19\b8\x96\xfb\x9f\xf9y\xf0:\xa18\xd8s\xf6~\x86\x84\xd6\xc1\xdaGo\xcc\xe1\xedq\x06\xb8\xb5\xaf4\xa3\xf5\xf0\xd1\xc13F\xfa.\xf0\"\x12\xe4\x1a\xed\xb7\xaeC\xceDwn\xc5C3v&%\xe0\xe7\xc6\x89\xbb\nH\x0fF\xdc\x03\xba\x18Y\x9d\x7f\xc8B\xfai\x8f]\xcf\x11F\xcb4\x90\x84\n\xea\xd0\x1d0\xb5\xcc\x1f\xf8\xf7\xbb\xf6\xb0\xc3D\xffb\xdchM\xeaq`\xc3\x9bfw\x9d|m0:\xd3\xb3$\xabJ\x84b\x1d\x12\xd0\xf7{\x19\x1cu\x94\x85\xd7\xf7\x88\x8a\xb1\x1c\xc3\x8d\x85.\xb3\xebE\xc2\xa5\r\xf7l\xdd~\xfe\a\xd5K\xb0\v}_\x92s\x9a\x06\x06\xa9I\x86\xc4\xdc\x83\x03\r\x93HXz4\xed\xa5\xd2f3E\xc6\xb7)\x1d\xb2^\x8a\x0e\x1bv\x10\xeffv\x95|\xfb+|\b\xf5\xf4\"t\xd5\xf3%\xb0\x12Y\xa4\xbf\xf8\xb8\xeaF\x91\x96\x9dO`\xf0Pv\xb9\xeb\xf7\xc6\xd7\n\x90B\xe9\f\x8c)\x83iYy\xf3\n\xd7\xbb\x19\xe9~\xbc\x8f\xf4\xda\xcc\xfe6nu\xb8\x82l\x1djc\xe9\xce\"\x1a\x19:G\xa3\xb5\xd34\xe3\xf9>\x91*\xb4\xd7M\xa7\xd3\x19\xed\xf3\xbb\xd8\xb6_\xdb\xec\xacM\xb1\xfc\xcd^\xd1\x18\xf6\t\x12\xdd\n\x16VT\xedT\xa2J\xa4\xe4{\x12\x8df\xed\xd9Q.\xd7\x03+?\r\x98J\x9a\x13\x17\x9c1\xe6\xf7\xaf\x99k&\x96w\xa5\x0e \x01\xe5\xeb\x92\xe2\xd5\xc0\x88D\x06tE\xeb~q>T\x0f\xfa\x1e\xea\xb9H\x1a\xf9VHW;D\xc0\x98\ncs\xbf\xe48*\x8b\ry\x9di\xb2=\xeaI\xd6\xec\xd9\xf6\x15\xf9\x02R\xd0\xaeb\xe0\xab\x01\xb6R\xbc\x88\x13r:\x9a\x99\xc0\x81\x01\xd7\xe2\xcd\xe5\x1f9+\xd2hOp\x95\xf0\x18x\xda{\xbe\x82\xa7\xc1\xbdZ\xc1\xa2o\xae\x13w\xd6\xe3\xfe\x91\x81\x9c\xbb\x9d\x9a\x10\xf9\xd7\xcc\'\xdc\xbf\x1b\xd0\x14F\x19\x86\x9b\xeb\xce\xba\xe4*\x8a\x11\x1b=\xa6\x89Y\x1b\xa2\xde\xac\x0e[N\xb4\xd7x!\x95\xbb%\xb3o\x00\xc3\x9f\xaa(\xac\xf7\xcc\xe6\xeb\x97\xab\xabz\xd5\xe8\x15:\xd8Ck\xed.\x81\xa0I:Vs0\xe6\xf5jE\xff\xd1\xd8\x1bHQXd-ifA\xdcO\xfb\xe4\xca\xcb\xc0\xd8~\xf1\xb2u\xb1B-\x90\xfe\xd5\xe7\x85\xea /\xa0\r|\x04\x8fG\x8e\x8e\x8d{\xbd\x9bb\x02\x96d\'\xc7\"_\b\xae\xef\xdb\xa8dqY\xaa\x13]H\xe0\xf9\x8a\xa2\xec\xb0eI\x9f\xc9\x8bhw\xcfTG\xdf\x19\x83\x04\xe7\xa4\xa21\xbd\"\x89\xb9\xc2\xe8\xad\x1aR-\x95\x10\xde(\x01\xbf\xe0\x04b\x84S\au\r\x1d\x8c\x19\x81\xb8\xf2\xcd\a\xe3-\xc6\x82O0\x14\v}^\x00\x00\xca\x1f\x83\x85z\x81\xd9\xa3\xbc\xac\x1e\xf4\xfb\xef9t\')\xe1Q\x03\x80\xcc\x13\xd5\x16\x03\xe7\xab\xf2a\x9a}4]\xbd\xb6\x98\x02\xa2\"$\xb9\x9cb\xfc<\x99\xd1S\x9e=\xd7w66\xf4\x86\v\x00`\x95\x1bT\x0f\"\xe9P\x85UR\xbc\xda\x1fH\x9c\x00\x00\x00\x00\x00\x00\x00\b-LW\xc4\x91\x17\xc5\x86,N6\x9e\xa6\xeb@VA\xf6\xd0\x14\xcc{:', 0x8) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x3, 0x20, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x2, 0x5, 0x0, 0x4, 0x5, 0xffffffffffffff00, 0x2, 0x3, 0x4000205, 0x7, 0x0, 0x0, 0x0, 0x3, 0x100, 0x10009}, 0x7, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) 11.339701472s ago: executing program 1 (id=198): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000380), 0x208100, 0x0) fcntl$getown(r3, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f00200", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 11.101483482s ago: executing program 1 (id=200): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x7ffffffff000, 0x7fffffffefff, 0x2, 0x2, 0x0, 0x50b301a, 0x2c, 0x2c, 0x4}) r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129843, 0x0) ioctl$auto(r3, 0x921064b1, 0x8) write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f0000000100)='1', 0x1) 6.183509446s ago: executing program 3 (id=225): adjtimex$auto(0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x20, 0x5}, 0x7) flock$auto(r1, 0x6) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r2, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) ioctl$auto_SNDCTL_SEQ_RESET(r0, 0x5100, &(0x7f0000000180)="0f82814a937da6e83a096e304c8c98d0064f26cbb26a03a79573eb7159594e9625097c91e99234ebced25478bd1e1eaacd7dda8cd4cadeba19e40f80e835aa177231df8fac35e03735f0010d94982edf08149926cc22b1ddcf0dacb39ada36df0bfc4430e142c03ebadf0404373d8b1a9d445035af8d61881140f4df8836ea7da012bca06862ebcef8ae3064801924a49d6d05ea1a252a3794165606a3b8032230a2489ae8001fecd9e82fbc48e8c5b60a060212aae75a95d707608a2413ea283ae61ba939fadbe53c005049038c51b4f89ca09ae294d1fde51069b5a9e959a002d6d8913874afa5bc") write$auto(r3, 0x0, 0x100) 5.614364848s ago: executing program 3 (id=229): mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x401}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x40) mmap$auto(0x0, 0x20009, 0xe2, 0x200000000000eb1, 0x405, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000007ec0)=""/254, 0xfe) r6 = socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(r6, 0x10f, 0x7f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002000000000000000000008869e71e0000", @ANYRES32=0x0, @ANYBLOB="0600075fbb80000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880800030004"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) getsockopt$auto(r3, 0x6a2, 0x7, &(0x7f0000000340)='ila\x00', &(0x7f0000000380)=0xffffff81) close_range$auto(0x2, 0x8, 0x0) signalfd$auto(r0, &(0x7f0000000300)={0xa5c}, 0x6) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=')'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.460187999s ago: executing program 1 (id=230): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0xa002, 0x0) writev$auto(r0, &(0x7f0000000300)={0x0, 0x1}, 0x100) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) socketpair$auto(0x4, 0x8, 0xd, 0x0) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) bind$auto(0x3, 0x0, 0x6a) pselect6$auto(0x9, &(0x7f0000000080)={[0xfff, 0x8, 0x9, 0x80000000, 0x2, 0x100, 0xfffffffffffffffe, 0x5, 0x9, 0x20000000000000, 0x2, 0xe, 0x7, 0x0, 0x7, 0x8]}, &(0x7f0000000140)={[0x8, 0x9, 0xd, 0x4, 0x3b7b, 0x8, 0x7, 0xf63, 0x5815eff, 0x7, 0x7, 0x0, 0xfffffffffffffffc, 0xff2, 0x7, 0x6]}, &(0x7f00000001c0)={[0x1, 0x7537, 0x23, 0x8, 0x5, 0x4, 0x5, 0x7, 0x7, 0x8, 0xb3d, 0x4, 0x10001, 0x0, 0x8, 0x6]}, &(0x7f0000000000)={0x1, 0x5}, &(0x7f00000006c0)="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") openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000340), 0x84342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6\x00'/62, 0x5, 0x8000400) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) bpf$auto(0x0, &(0x7f0000000440)=@link_update={0xffffffffffffffff, @new_map_fd, 0x4, @old_map_fd}, 0xa3) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, &(0x7f0000000240)=""/155, 0x9b) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x4000007d) mmap$auto(0x0, 0x404020009, 0xdb, 0xf1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 5.44028881s ago: executing program 2 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) (async) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) (async) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ppoll$auto(&(0x7f0000000100)={r5, 0xf, 0x8}, 0x3, 0x0, 0x0, 0x8) copy_file_range$auto(r4, 0x0, r6, 0x0, 0x6, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010329bd700002dcdf2524"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) (async) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 5.395786997s ago: executing program 0 (id=232): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe, 0x4, 'N,SKSTATS\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) rename$auto(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') 4.430490505s ago: executing program 3 (id=233): socket(0x15, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(r1, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000740)="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", 0x30c) prctl$auto_PR_SET_MM_END_DATA(0x3, 0x4, r0, 0x10001, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x5, 0x100000000000009, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000004, 0xd, 0x6, 0x9}) r3 = socket(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setsockopt$auto(r3, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bpf$auto(0xfffffffe, &(0x7f0000000000)=@query={@target_fd, 0x9, 0xfff, 0x7, 0x1, @count=0x10, 0x0, 0x8, 0x0, 0x3, 0x4}, 0x9f) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.395942091s ago: executing program 0 (id=234): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) ppoll$auto(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xb}}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 4.176307883s ago: executing program 2 (id=235): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000380), 0x208100, 0x0) fcntl$getown(r3, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.172014948s ago: executing program 1 (id=236): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/state\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4106, 0x100a) fcntl$auto(0x3, 0x4, 0xa553) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x5) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x2c, 0x0, 0x2}) setsockopt$auto(r0, 0x3, 0x6, &(0x7f0000000000)='\x00', 0x6) gettid() 3.904982551s ago: executing program 3 (id=237): socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x7, &(0x7f00000000c0)=@bpf_attr_3={0x400, 0xc, 0x400000000000, 0x4, 0x2000003, 0xa9e3, 0x7, 0x1ff, 0xfffffff8, "6c11060881f63dc0147d57604a90d48c", 0x0, 0x7fffffff, 0xffffffffffffffff, 0x4, 0x6, 0x5, 0x8, 0x4, 0x2, 0xfffffffb, @attach_prog_fd, 0x2, 0x4007, 0x80000001, 0xc3d, 0x1}, 0xf) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa1\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x1f, 0x0) 3.781578529s ago: executing program 1 (id=238): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x7ffffffff000, 0x7fffffffefff, 0x2, 0x2, 0x0, 0x50b301a, 0x2c, 0x2c, 0x4}) r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129843, 0x0) ioctl$auto(r3, 0x921064b1, 0x8) write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f0000000100)='1', 0x1) 3.709909984s ago: executing program 2 (id=239): r0 = socket(0x23, 0x3, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x8008000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20048810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8c, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x139b) setsockopt$auto(r1, 0x114, 0x1, 0x0, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000509000000000000000009009c781e2108000a000800000014cde4c147d3cf13b800003f3ddaea85876fc90014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2, 0xe2, 0x259b, 0x405, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x480082, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/icmp\x00', 0x141480, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) write$auto(r4, 0x0, 0x100) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24004084}, 0x4000) close_range$auto(0x2, 0x8, 0x0) 3.578732786s ago: executing program 3 (id=240): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/version\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() open(&(0x7f0000000100)='./file0\x00', 0x0, 0x152) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff4, 0xa) msync$auto(0xe2, 0x180000000000000, 0x400000004) mmap$auto(0x100000000000000, 0x2, 0x4000000000df, 0x40df, 0x401, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioprio_set$auto(0x2, 0x800000000, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x7b) write$auto(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) bpf$auto(0xc0, 0x0, 0x7) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x100, 0x0) ioctl$auto(r0, 0xc0404d1a, r0) socket(0x12, 0x4, 0x440e) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x200dc0, 0x0) io_setup$auto(0x10000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syncfs$auto(r2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3.196418468s ago: executing program 0 (id=241): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty7\x00', 0x40, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) rseq$auto(0x0, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) process_mrelease$auto(0xffffffffffffffff, 0x0) fcntl$auto(r0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.10/usb30/30-0:1.0/usb30-port2/power/runtime_active_time\x00', 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event0\x00', 0x30800, 0x0) ioctl$auto_EVIOCSKEYCODE(r2, 0x40084504, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000080)=0x10001) socket(0xa, 0x5, 0x84) 2.086595853s ago: executing program 2 (id=242): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x4) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.events\x00', 0x60640, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x806, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)={0x1c, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x4000000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xbc, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_PMKR0_NAME={0xa0, 0x102, "7afecddf107008c738744619d58dda27c5084a5ba88d411c84422a8893533ba53fde00d15dfbadc312e8ac7fa43b5290f60b972ba8b897feba5e3e702e44de68bb78861c922e9ec1d8a3c153d9d579de7fed31f0bf14384824759c3bc7718d1a1911fcb45570dcf9862ba0f5c26f5d271541742102daaca23e9c79ea4bc301dea4f2feaaa991be75b1e41ef12c5d8076b8395f65a494197d0e64de23"}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x7fd798633ea74131}, 0x401c010) 988.551984ms ago: executing program 0 (id=244): r0 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/sym-userobj\x00', 0x143701, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x200, 0x5, 0x4, 0x0) close_range$auto(r1, r0, 0x0) r2 = open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) shmctl$auto(0x691, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_STATION(r3, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x2) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mbind$auto(0x1, 0x200, 0x4e, &(0x7f00000000c0)=0x2, 0x7fffffff, 0x1) mmap$auto(0x4, 0x7ff, 0x8, 0xeb1, 0x401, 0x200) sysfs$auto(0x2, 0xd, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x3, &(0x7f0000000000)='Q**\x00', 0x0, 0x0) r6 = socket(0x10, 0x2, 0x2) mq_open$auto(0x0, 0x7e, 0x9, 0x0) socket(0x1, 0x1, 0x0) write$auto(r6, 0x0, 0x2fb) io_uring_setup$auto(0x1, 0x0) close_range$auto(r2, r4, 0xa) 767.204528ms ago: executing program 2 (id=245): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x11e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0) 347.881042ms ago: executing program 2 (id=246): socket(0x15, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(r1, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000740)="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", 0x30c) prctl$auto_PR_SET_MM_END_DATA(0x3, 0x4, r0, 0x10001, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x5, 0x100000000000009, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000004, 0xd, 0x6, 0x9}) r3 = socket(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setsockopt$auto(r3, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bpf$auto(0xfffffffe, &(0x7f0000000000)=@query={@target_fd, 0x9, 0xfff, 0x7, 0x1, @count=0x10, 0x0, 0x8, 0x0, 0x3, 0x4}, 0x9f) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 41.395597ms ago: executing program 0 (id=247): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/tsf\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x101402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r1, &(0x7f0000000240)=""/194, 0xc2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000140)="e1e4302f71a6c0fa6f78dbbd0be9b98d087e8c138d512bf571c876425189a05908d1b840d7fb4f03ed629c50acadbec358f0439076bb54eb19df6608e0f81d7412d06d5bef2d35c926e23ba241defc891c2e5ae8add6c7d9f848d1832d6d80e6853c", 0x0) pread64$auto(r3, 0x0, 0x1ff, 0xf4) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) 0s ago: executing program 3 (id=248): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000380), 0x208100, 0x0) fcntl$getown(r3, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 91.341147][ T5814] cgroup: Unknown subsys name 'net' [ 91.480786][ T5814] cgroup: Unknown subsys name 'cpuset' [ 91.490137][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.472523][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.714033][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.734533][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.742575][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.752429][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.759763][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.767339][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.776678][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.797233][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.815871][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.818855][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.826111][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.831665][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.839802][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.844731][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.853912][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.867354][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.876114][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.885546][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.902114][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.910783][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.581603][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 96.600519][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 96.614026][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 96.776307][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 96.868202][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.876083][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.883435][ T5828] bridge_slave_0: entered allmulticast mode [ 96.891627][ T5828] bridge_slave_0: entered promiscuous mode [ 96.973265][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.980903][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.988934][ T5828] bridge_slave_1: entered allmulticast mode [ 96.999844][ T9] cfg80211: failed to load regulatory.db [ 97.006844][ T5828] bridge_slave_1: entered promiscuous mode [ 97.013893][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.021367][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.028909][ T5834] bridge_slave_0: entered allmulticast mode [ 97.037260][ T5834] bridge_slave_0: entered promiscuous mode [ 97.045248][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.052948][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.060474][ T5834] bridge_slave_1: entered allmulticast mode [ 97.068193][ T5834] bridge_slave_1: entered promiscuous mode [ 97.088642][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.096192][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.103368][ T5824] bridge_slave_0: entered allmulticast mode [ 97.110891][ T5824] bridge_slave_0: entered promiscuous mode [ 97.207802][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.215050][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.223218][ T5824] bridge_slave_1: entered allmulticast mode [ 97.233054][ T5824] bridge_slave_1: entered promiscuous mode [ 97.256396][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.263563][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.271577][ T5831] bridge_slave_0: entered allmulticast mode [ 97.279288][ T5831] bridge_slave_0: entered promiscuous mode [ 97.288431][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.295720][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.302905][ T5831] bridge_slave_1: entered allmulticast mode [ 97.311611][ T5831] bridge_slave_1: entered promiscuous mode [ 97.321866][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.336347][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.350308][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.362471][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.457589][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.502668][ T5834] team0: Port device team_slave_0 added [ 97.511231][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.539520][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.551995][ T5828] team0: Port device team_slave_0 added [ 97.560091][ T5834] team0: Port device team_slave_1 added [ 97.599717][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.611397][ T5828] team0: Port device team_slave_1 added [ 97.649987][ T5824] team0: Port device team_slave_0 added [ 97.659552][ T5824] team0: Port device team_slave_1 added [ 97.694673][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.701937][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.729061][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.742986][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.750111][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.776175][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.827996][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.834992][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.863943][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.875795][ T5138] Bluetooth: hci1: command tx timeout [ 97.878935][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.884341][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.917830][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.938123][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.945106][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.971594][ T5832] Bluetooth: hci3: command tx timeout [ 97.974319][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.977266][ T5826] Bluetooth: hci0: command tx timeout [ 97.993676][ T5138] Bluetooth: hci2: command tx timeout [ 97.994370][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.006756][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.033144][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.048650][ T5831] team0: Port device team_slave_0 added [ 98.076226][ T5831] team0: Port device team_slave_1 added [ 98.161338][ T5828] hsr_slave_0: entered promiscuous mode [ 98.168126][ T5828] hsr_slave_1: entered promiscuous mode [ 98.179758][ T5834] hsr_slave_0: entered promiscuous mode [ 98.188909][ T5834] hsr_slave_1: entered promiscuous mode [ 98.195100][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.203392][ T5834] Cannot create hsr debugfs directory [ 98.254661][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.262355][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.289659][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.323343][ T5824] hsr_slave_0: entered promiscuous mode [ 98.330143][ T5824] hsr_slave_1: entered promiscuous mode [ 98.336859][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.344491][ T5824] Cannot create hsr debugfs directory [ 98.359687][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.366747][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.392849][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.632278][ T5831] hsr_slave_0: entered promiscuous mode [ 98.639587][ T5831] hsr_slave_1: entered promiscuous mode [ 98.646028][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.653616][ T5831] Cannot create hsr debugfs directory [ 98.979028][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.010464][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.037611][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.059434][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.099189][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.117874][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.151905][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.162821][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.270990][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.298911][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.314035][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.344686][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.434613][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.448734][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.471851][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.485228][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.510628][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.588821][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.613073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.620407][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.632758][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.639997][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.659357][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.717010][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.771718][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.778920][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.801102][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.834243][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.841413][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.887866][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.956672][ T5832] Bluetooth: hci1: command tx timeout [ 100.008560][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.023708][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.041495][ T5832] Bluetooth: hci3: command tx timeout [ 100.045698][ T5826] Bluetooth: hci0: command tx timeout [ 100.046978][ T5138] Bluetooth: hci2: command tx timeout [ 100.062246][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.082018][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.089220][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.132798][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.140056][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.174009][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.220562][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.227795][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.284782][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.292030][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.483374][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.640060][ T5834] veth0_vlan: entered promiscuous mode [ 100.681466][ T5834] veth1_vlan: entered promiscuous mode [ 100.768708][ T5834] veth0_macvtap: entered promiscuous mode [ 100.805352][ T5834] veth1_macvtap: entered promiscuous mode [ 100.858588][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.889112][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.901277][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.964431][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.018935][ T5824] veth0_vlan: entered promiscuous mode [ 101.079803][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.090083][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.099361][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.108945][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.135109][ T5824] veth1_vlan: entered promiscuous mode [ 101.149613][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.273136][ T5828] veth0_vlan: entered promiscuous mode [ 101.327246][ T5828] veth1_vlan: entered promiscuous mode [ 101.336723][ T5824] veth0_macvtap: entered promiscuous mode [ 101.345056][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.352008][ T5824] veth1_macvtap: entered promiscuous mode [ 101.363662][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.373207][ T5831] veth0_vlan: entered promiscuous mode [ 101.437690][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.450570][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.452030][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.462437][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.476816][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.489090][ T5831] veth1_vlan: entered promiscuous mode [ 101.540209][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.554089][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.567785][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.588778][ T5828] veth0_macvtap: entered promiscuous mode [ 101.606800][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.617121][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.626183][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.634910][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.648223][ T5828] veth1_macvtap: entered promiscuous mode [ 101.681634][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.684520][ T5831] veth0_macvtap: entered promiscuous mode [ 101.736974][ T5831] veth1_macvtap: entered promiscuous mode [ 101.784915][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.825469][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.835348][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.869192][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.881713][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.932456][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.957421][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.970206][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.981861][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.001489][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.033960][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.050213][ T5138] Bluetooth: hci1: command tx timeout [ 102.055942][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.064774][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.077123][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.101499][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.112343][ T5138] Bluetooth: hci0: command tx timeout [ 102.120408][ T5832] Bluetooth: hci2: command tx timeout [ 102.120638][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.125960][ T5138] Bluetooth: hci3: command tx timeout [ 102.139996][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.150880][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.159558][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.170932][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.181380][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.192694][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.204709][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.230710][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.245077][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.257548][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.269303][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.280774][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.291304][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.303701][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.364043][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.385521][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.394347][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.413589][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.438829][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.447217][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.673738][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.690991][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.776331][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.792118][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.893028][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.932267][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.970801][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.016391][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.210461][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 103.364098][ T5905] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 103.380718][ T5912] Zero length message leads to an empty skb [ 103.562167][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 103.804165][ T5922] process 'syz.3.8' launched './file0' with NULL argv: empty string added [ 103.987758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.996712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.107532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.114633][ T5138] Bluetooth: hci1: command tx timeout [ 104.186840][ T5832] Bluetooth: hci2: command tx timeout [ 104.192366][ T5832] Bluetooth: hci0: command tx timeout [ 104.199084][ T5138] Bluetooth: hci3: command tx timeout [ 104.490631][ T5930] ptp ptp0: new virtual clock ptp1 [ 104.621935][ T5930] ptp ptp0: guarantee physical clock free running [ 105.411148][ T30] audit: type=1800 audit(1746910385.382:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="dummy_udc" dev="gadgetfs" ino=6640 res=0 errno=0 [ 106.228259][ T5960] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 106.708426][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 107.066793][ T5967] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 107.081558][ T5970] netlink: 342 bytes leftover after parsing attributes in process `syz.1.15'. [ 107.725837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.735136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.120177][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 109.562853][ T6000] netlink: 504 bytes leftover after parsing attributes in process `syz.3.25'. [ 109.664756][ T6000] netlink: 350 bytes leftover after parsing attributes in process `syz.3.25'. [ 109.779735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.059047][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 110.176689][ T6007] team0: Port device team_slave_0 removed [ 110.225629][ T6010] netlink: 350 bytes leftover after parsing attributes in process `syz.3.27'. [ 110.722918][ T6020] mmap: syz.1.31 (6020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.863049][ T6023] FAULT_INJECTION: forcing a failure. [ 110.863049][ T6023] name failslab, interval 1, probability 0, space 0, times 1 [ 110.929632][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.2.33 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 110.929680][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.929704][ T6023] Call Trace: [ 110.929715][ T6023] [ 110.929731][ T6023] dump_stack_lvl+0x16c/0x1f0 [ 110.929785][ T6023] should_fail_ex+0x512/0x640 [ 110.929830][ T6023] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 110.929888][ T6023] should_failslab+0xc2/0x120 [ 110.929928][ T6023] __kmalloc_cache_noprof+0x6a/0x3e0 [ 110.929982][ T6023] ? nfs_alloc_fhandle+0x3b/0x90 [ 110.930030][ T6023] nfs_alloc_fhandle+0x3b/0x90 [ 110.930071][ T6023] nfs_init_fs_context+0x65/0x11e0 [ 110.930115][ T6023] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 110.930160][ T6023] alloc_fs_context+0x54a/0x9c0 [ 110.930199][ T6023] __x64_sys_fsopen+0xeb/0x240 [ 110.930238][ T6023] do_syscall_64+0xcd/0x230 [ 110.930287][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.930320][ T6023] RIP: 0033:0x7fbf8278e969 [ 110.930346][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.930376][ T6023] RSP: 002b:00007fbf83540038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 110.930407][ T6023] RAX: ffffffffffffffda RBX: 00007fbf829b5fa0 RCX: 00007fbf8278e969 [ 110.930428][ T6023] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 110.930447][ T6023] RBP: 00007fbf82810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 110.930466][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.930485][ T6023] R13: 0000000000000000 R14: 00007fbf829b5fa0 R15: 00007ffc84d28028 [ 110.930533][ T6023] [ 111.153728][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.245865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.485164][ T6032] can: request_module (can-proto-3) failed. [ 111.770513][ T6044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 111.853491][ T6044] netlink: 350 bytes leftover after parsing attributes in process `syz.3.38'. [ 112.335033][ T30] audit: type=1326 audit(1746910392.292:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.0.42" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fbbd8e969 code=0x0 [ 112.892611][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 113.180879][ T6072] bond0: (slave bond_slave_0): Releasing backup interface [ 113.406276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.475927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.839230][ T6079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 113.926052][ T6079] netlink: 350 bytes leftover after parsing attributes in process `syz.3.48'. [ 114.079645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 114.766506][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 114.862319][ T6100] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 115.209857][ T6106] FAULT_INJECTION: forcing a failure. [ 115.209857][ T6106] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 115.265703][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.0.54 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 115.265734][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.265747][ T6106] Call Trace: [ 115.265754][ T6106] [ 115.265762][ T6106] dump_stack_lvl+0x16c/0x1f0 [ 115.265799][ T6106] should_fail_ex+0x512/0x640 [ 115.265836][ T6106] should_fail_alloc_page+0xe7/0x130 [ 115.265867][ T6106] prepare_alloc_pages+0x3c2/0x610 [ 115.265907][ T6106] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 115.265938][ T6106] ? mark_held_locks+0x49/0x80 [ 115.265975][ T6106] ? finish_task_switch.isra.0+0x221/0xc10 [ 115.265998][ T6106] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.266029][ T6106] ? finish_task_switch.isra.0+0x221/0xc10 [ 115.266053][ T6106] ? rcu_is_watching+0x12/0xc0 [ 115.266074][ T6106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.266102][ T6106] ? handle_mm_fault+0x3fe/0xad0 [ 115.266122][ T6106] ? do_user_addr_fault+0x7a6/0x1370 [ 115.266143][ T6106] ? exc_page_fault+0x5c/0xc0 [ 115.266170][ T6106] ? asm_exc_page_fault+0x26/0x30 [ 115.266206][ T6106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.266240][ T6106] ? policy_nodemask+0xea/0x4e0 [ 115.266270][ T6106] alloc_pages_mpol+0x1fb/0x550 [ 115.266304][ T6106] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.266340][ T6106] alloc_pages_noprof+0x131/0x390 [ 115.266369][ T6106] pte_alloc_one+0x19/0x380 [ 115.266395][ T6106] do_pte_missing+0x1c0b/0x3fb0 [ 115.266417][ T6106] ? do_raw_spin_unlock+0x172/0x230 [ 115.266454][ T6106] ? __pmd_alloc+0x3c2/0x870 [ 115.266485][ T6106] ? find_held_lock+0x2b/0x80 [ 115.266508][ T6106] __handle_mm_fault+0x103d/0x2a40 [ 115.266539][ T6106] ? __pfx___handle_mm_fault+0x10/0x10 [ 115.266578][ T6106] ? find_vma+0xbf/0x140 [ 115.266608][ T6106] ? __pfx_find_vma+0x10/0x10 [ 115.266642][ T6106] handle_mm_fault+0x3fe/0xad0 [ 115.266670][ T6106] do_user_addr_fault+0x7a6/0x1370 [ 115.266695][ T6106] ? rcu_is_watching+0x12/0xc0 [ 115.266718][ T6106] exc_page_fault+0x5c/0xc0 [ 115.266748][ T6106] asm_exc_page_fault+0x26/0x30 [ 115.266769][ T6106] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 115.266795][ T6106] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 115.266816][ T6106] RSP: 0018:ffffc9000aedf9e0 EFLAGS: 00050216 [ 115.266834][ T6106] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000020 [ 115.266847][ T6106] RDX: fffff520015dbf85 RSI: 0000000000000038 RDI: ffffc9000aedfc08 [ 115.266861][ T6106] RBP: 0000000000000020 R08: 0000000000000001 R09: fffff520015dbf84 [ 115.266875][ T6106] R10: ffffc9000aedfc27 R11: 0000000000000000 R12: 0000000000000000 [ 115.266888][ T6106] R13: ffffc9000aedfc08 R14: 0000000000000000 R15: 0000000000000003 [ 115.266916][ T6106] _copy_from_user+0x98/0xd0 [ 115.266956][ T6106] kvm_vm_ioctl+0x1850/0x3d40 [ 115.266999][ T6106] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 115.267042][ T6106] ? kasan_quarantine_put+0x10a/0x240 [ 115.267064][ T6106] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.267097][ T6106] ? find_held_lock+0x2b/0x80 [ 115.267119][ T6106] ? tomoyo_path_number_perm+0x295/0x580 [ 115.267151][ T6106] ? tomoyo_path_number_perm+0x18d/0x580 [ 115.267181][ T6106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.267207][ T6106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.267239][ T6106] ? do_vfs_ioctl+0x512/0x1990 [ 115.267270][ T6106] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.267320][ T6106] ? find_held_lock+0x2b/0x80 [ 115.267341][ T6106] ? hook_file_ioctl_common+0x145/0x410 [ 115.267372][ T6106] ? __fget_files+0x20e/0x3c0 [ 115.267412][ T6106] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 115.267439][ T6106] __x64_sys_ioctl+0x190/0x200 [ 115.267472][ T6106] do_syscall_64+0xcd/0x230 [ 115.267506][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.267528][ T6106] RIP: 0033:0x7f5fbbd8e969 [ 115.267545][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.267566][ T6106] RSP: 002b:00007f5fbcb9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.267585][ T6106] RAX: ffffffffffffffda RBX: 00007f5fbbfb5fa0 RCX: 00007f5fbbd8e969 [ 115.267600][ T6106] RDX: 0000000000000038 RSI: 000000004020aea5 RDI: 0000000000000003 [ 115.267613][ T6106] RBP: 00007f5fbcb9d090 R08: 0000000000000000 R09: 0000000000000000 [ 115.267626][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.267639][ T6106] R13: 0000000000000000 R14: 00007f5fbbfb5fa0 R15: 00007fff2bb3a508 [ 115.267667][ T6106] [ 115.809533][ T6114] FAULT_INJECTION: forcing a failure. [ 115.809533][ T6114] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.301433][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.3.55 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 116.301476][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.301490][ T6114] Call Trace: [ 116.301497][ T6114] [ 116.301506][ T6114] dump_stack_lvl+0x16c/0x1f0 [ 116.301542][ T6114] should_fail_ex+0x512/0x640 [ 116.301578][ T6114] _copy_from_user+0x2e/0xd0 [ 116.301613][ T6114] copy_msghdr_from_user+0x98/0x160 [ 116.301638][ T6114] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 116.301676][ T6114] ___sys_sendmsg+0xfe/0x1d0 [ 116.301702][ T6114] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.301759][ T6114] __sys_sendmsg+0x16d/0x220 [ 116.301784][ T6114] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.301817][ T6114] ? rcu_is_watching+0x12/0xc0 [ 116.301845][ T6114] do_syscall_64+0xcd/0x230 [ 116.301878][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.301900][ T6114] RIP: 0033:0x7f1b8338e969 [ 116.301917][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.301938][ T6114] RSP: 002b:00007f1b84182038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.301957][ T6114] RAX: ffffffffffffffda RBX: 00007f1b835b5fa0 RCX: 00007f1b8338e969 [ 116.301971][ T6114] RDX: 0000000000000000 RSI: 0000200000002040 RDI: 0000000000000003 [ 116.301984][ T6114] RBP: 00007f1b84182090 R08: 0000000000000000 R09: 0000000000000000 [ 116.301996][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.302008][ T6114] R13: 0000000000000000 R14: 00007f1b835b5fa0 R15: 00007ffe28db51a8 [ 116.302035][ T6114] [ 117.443192][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 119.328153][ T6154] blkio.reset_stats is deprecated [ 120.297491][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'. [ 120.439352][ T6159] netlink: 350 bytes leftover after parsing attributes in process `syz.1.66'. [ 120.504223][ T6158] team0: Port device team_slave_0 removed [ 121.082064][ T6172] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.209970][ T6175] Invalid ELF header magic: != ELF [ 121.254602][ T6175] Invalid ELF header magic: != ELF [ 121.341837][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 121.443176][ T6175] Invalid ELF header magic: != ELF [ 121.557522][ T6175] Invalid ELF header magic: != ELF [ 121.592706][ T6175] Invalid ELF header magic: != ELF [ 121.833797][ T6175] Invalid ELF header magic: != ELF [ 122.001772][ T6175] Invalid ELF header magic: != ELF [ 122.032347][ T6175] Invalid ELF header magic: != ELF [ 122.071455][ T6175] Invalid ELF header magic: != ELF [ 122.124942][ T6175] Invalid ELF header magic: != ELF [ 122.155965][ T6175] Invalid ELF header magic: != ELF [ 122.191624][ T6175] Invalid ELF header magic: != ELF [ 122.238547][ T6175] Invalid ELF header magic: != ELF [ 122.457569][ T6175] Invalid ELF header magic: != ELF [ 123.346911][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 123.417436][ T6208] netlink: 350 bytes leftover after parsing attributes in process `syz.1.79'. [ 123.511379][ T6210] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 123.776168][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'. [ 123.974194][ T6220] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.073662][ T6231] netlink: 334 bytes leftover after parsing attributes in process `syz.2.84'. [ 124.123155][ T6225] bond0: (slave bond_slave_0): Releasing backup interface [ 124.179293][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'. [ 127.276380][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.97'. [ 127.384065][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 127.406523][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 127.453965][ T6283] bond0: (slave bond_slave_0): Releasing backup interface [ 128.924450][ T6306] FAULT_INJECTION: forcing a failure. [ 128.924450][ T6306] name failslab, interval 1, probability 0, space 0, times 0 [ 128.937467][ T6306] CPU: 1 UID: 0 PID: 6306 Comm: syz.2.103 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 128.937498][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.937511][ T6306] Call Trace: [ 128.937519][ T6306] [ 128.937527][ T6306] dump_stack_lvl+0x16c/0x1f0 [ 128.937565][ T6306] should_fail_ex+0x512/0x640 [ 128.937598][ T6306] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 128.937642][ T6306] should_failslab+0xc2/0x120 [ 128.937671][ T6306] __kmalloc_cache_noprof+0x6a/0x3e0 [ 128.937710][ T6306] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 128.937752][ T6306] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 128.937791][ T6306] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 128.937827][ T6306] ? kfree+0x2b6/0x4d0 [ 128.937846][ T6306] ? snd_pcm_oss_change_params_locked+0x958/0x3b40 [ 128.937887][ T6306] snd_pcm_oss_change_params_locked+0x9cd/0x3b40 [ 128.937946][ T6306] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 128.937983][ T6306] ? __pfx___futex_wait+0x10/0x10 [ 128.938034][ T6306] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 128.938076][ T6306] snd_pcm_oss_read+0x39b/0x760 [ 128.938111][ T6306] ? security_file_permission+0x71/0x210 [ 128.938151][ T6306] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 128.938189][ T6306] vfs_read+0x1de/0xc70 [ 128.938216][ T6306] ? __pfx_vfs_read+0x10/0x10 [ 128.938235][ T6306] ? find_held_lock+0x2b/0x80 [ 128.938258][ T6306] ? __fget_files+0x204/0x3c0 [ 128.938298][ T6306] ? __fget_files+0x20e/0x3c0 [ 128.938342][ T6306] ksys_read+0x12a/0x240 [ 128.938363][ T6306] ? __pfx_ksys_read+0x10/0x10 [ 128.938382][ T6306] ? rcu_is_watching+0x12/0xc0 [ 128.938411][ T6306] do_syscall_64+0xcd/0x230 [ 128.938446][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.938470][ T6306] RIP: 0033:0x7fbf8278e969 [ 128.938488][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.938515][ T6306] RSP: 002b:00007fbf83540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.938539][ T6306] RAX: ffffffffffffffda RBX: 00007fbf829b5fa0 RCX: 00007fbf8278e969 [ 128.938553][ T6306] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 000000000000000a [ 128.938567][ T6306] RBP: 00007fbf82810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 128.938580][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.938593][ T6306] R13: 0000000000000000 R14: 00007fbf829b5fa0 R15: 00007ffc84d28028 [ 128.938621][ T6306] [ 128.983007][ T6307] input: f¬ as /devices/virtual/input/input6 [ 130.126832][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 130.239051][ T6330] netlink: 350 bytes leftover after parsing attributes in process `syz.2.106'. [ 130.314447][ T6324] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 130.342763][ T6324] CIFS mount error: No usable UNC path provided in device string! [ 130.342763][ T6324] [ 130.365045][ T6324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.479850][ T6334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'. [ 130.541127][ T6329] team0: Port device team_slave_0 removed [ 130.614868][ T6335] netlink: 350 bytes leftover after parsing attributes in process `syz.1.108'. [ 133.337848][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 133.435480][ T6383] netlink: 350 bytes leftover after parsing attributes in process `syz.1.118'. [ 133.933223][ T6394] netlink: 504 bytes leftover after parsing attributes in process `syz.1.120'. [ 134.394153][ T5138] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 134.394199][ T5138] Bluetooth: hci3: unexpected subevent 0x05 length: 725 > 12 [ 136.425535][ T5138] Bluetooth: hci3: command tx timeout [ 136.449005][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 136.467372][ T6431] netlink: 350 bytes leftover after parsing attributes in process `syz.3.129'. [ 136.538736][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 137.958455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.965169][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.824618][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 138.861660][ T6466] netlink: 350 bytes leftover after parsing attributes in process `syz.3.139'. [ 141.648140][ T6520] netlink: 330 bytes leftover after parsing attributes in process `syz.0.153'. [ 144.050088][ T6562] syz.1.167 uses obsolete (PF_INET,SOCK_PACKET) [ 144.584305][ T6569] can: request_module (can-proto-3) failed. [ 145.696164][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'. [ 145.833576][ T6590] FAULT_INJECTION: forcing a failure. [ 145.833576][ T6590] name failslab, interval 1, probability 0, space 0, times 0 [ 145.896338][ T6590] CPU: 1 UID: 0 PID: 6590 Comm: syz.1.171 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 145.896387][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.896406][ T6590] Call Trace: [ 145.896416][ T6590] [ 145.896428][ T6590] dump_stack_lvl+0x16c/0x1f0 [ 145.896480][ T6590] should_fail_ex+0x512/0x640 [ 145.896526][ T6590] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 145.896582][ T6590] should_failslab+0xc2/0x120 [ 145.896623][ T6590] __kmalloc_cache_noprof+0x6a/0x3e0 [ 145.896677][ T6590] ? nfs_alloc_fhandle+0x3b/0x90 [ 145.896727][ T6590] nfs_alloc_fhandle+0x3b/0x90 [ 145.896768][ T6590] nfs_init_fs_context+0x65/0x11e0 [ 145.896815][ T6590] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 145.896876][ T6590] alloc_fs_context+0x54a/0x9c0 [ 145.896917][ T6590] __x64_sys_fsopen+0xeb/0x240 [ 145.896957][ T6590] do_syscall_64+0xcd/0x230 [ 145.897007][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.897041][ T6590] RIP: 0033:0x7f72bcd8e969 [ 145.897066][ T6590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.897097][ T6590] RSP: 002b:00007f72bdb42038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 145.897128][ T6590] RAX: ffffffffffffffda RBX: 00007f72bcfb5fa0 RCX: 00007f72bcd8e969 [ 145.897149][ T6590] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 145.897168][ T6590] RBP: 00007f72bce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 145.897187][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.897206][ T6590] R13: 0000000000000000 R14: 00007f72bcfb5fa0 R15: 00007fff54a071e8 [ 145.897247][ T6590] [ 146.724949][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.175'. [ 146.796102][ T6599] netlink: 350 bytes leftover after parsing attributes in process `syz.0.175'. [ 146.990773][ T6597] team0: Port device team_slave_0 removed [ 148.242168][ T6625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 148.638783][ T6617] 0x000200000001-0xa29656a63616329 : "" [ 148.668172][ T6617] mtd: partition "" is out of reach -- disabled [ 148.752977][ T6617] ftl_cs: FTL header not found. [ 150.417966][ T6658] random: crng reseeded on system resumption [ 150.470230][ T6661] FAULT_INJECTION: forcing a failure. [ 150.470230][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.507137][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.3.192 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 150.507198][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.507219][ T6661] Call Trace: [ 150.507230][ T6661] [ 150.507244][ T6661] dump_stack_lvl+0x16c/0x1f0 [ 150.507299][ T6661] should_fail_ex+0x512/0x640 [ 150.507354][ T6661] _copy_from_user+0x2e/0xd0 [ 150.507405][ T6661] move_addr_to_kernel+0x65/0x170 [ 150.507459][ T6661] __copy_msghdr+0x386/0x470 [ 150.507497][ T6661] copy_msghdr_from_user+0xc1/0x160 [ 150.507535][ T6661] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 150.507581][ T6661] ? try_to_wake_up+0xa2f/0x1680 [ 150.507620][ T6661] ___sys_sendmsg+0xfe/0x1d0 [ 150.507659][ T6661] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.507745][ T6661] __sys_sendmsg+0x16d/0x220 [ 150.507792][ T6661] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.507830][ T6661] ? __x64_sys_futex+0x1e0/0x4c0 [ 150.507878][ T6661] ? rcu_is_watching+0x12/0xc0 [ 150.507921][ T6661] do_syscall_64+0xcd/0x230 [ 150.507974][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.508005][ T6661] RIP: 0033:0x7f1b8338e969 [ 150.508031][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.508063][ T6661] RSP: 002b:00007f1b84182038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.508095][ T6661] RAX: ffffffffffffffda RBX: 00007f1b835b5fa0 RCX: 00007f1b8338e969 [ 150.508116][ T6661] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000006 [ 150.508135][ T6661] RBP: 00007f1b83410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 150.508154][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.508180][ T6661] R13: 0000000000000000 R14: 00007f1b835b5fa0 R15: 00007ffe28db51a8 [ 150.508221][ T6661] [ 151.732932][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 153.117498][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'. [ 153.149840][ T6693] netlink: 350 bytes leftover after parsing attributes in process `syz.1.198'. [ 154.220945][ T6711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.096999][ T6712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.107519][ T6712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.147487][ T6712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.177745][ T6712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.189346][ T6712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.208517][ T6712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.233113][ T6712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.244554][ T6712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.258875][ T6712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.270548][ T6712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.289623][ T6712] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.305890][ T6712] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.111798][ T5138] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.448623][ T6757] batman_adv: Routing algorithm '' is not supported [ 156.907114][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.221'. [ 156.952276][ T6771] netlink: 350 bytes leftover after parsing attributes in process `syz.3.221'. [ 157.225793][ T5138] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.307867][ T5138] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.313928][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.351257][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 158.185954][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.305845][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.386149][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.392759][ T5138] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.610087][ T6797] zswap: compressor not available [ 160.274468][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 160.274531][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.385902][ T6836] netlink: 504 bytes leftover after parsing attributes in process `syz.2.235'. [ 161.385619][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.465767][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.465821][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.767784][ T6884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.414032][ T151] ------------[ cut here ]------------ [ 164.419648][ T151] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 164.447212][ T151] WARNING: CPU: 1 PID: 151 at net/mac80211/driver-ops.c:255 drv_get_tsf+0x1c7/0x780 [ 164.456747][ T151] Modules linked in: [ 164.461069][ T151] CPU: 1 UID: 0 PID: 151 Comm: kworker/u8:5 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 164.473322][ T151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.483631][ T151] Workqueue: events_unbound cfg80211_wiphy_work [ 164.490006][ T151] RIP: 0010:drv_get_tsf+0x1c7/0x780 [ 164.495274][ T151] Code: 0f 84 3d 05 00 00 e8 b8 e2 e2 f6 49 81 c4 20 01 00 00 e8 ac e2 e2 f6 44 89 f2 4c 89 e6 48 c7 c7 c0 b1 e3 8c e8 9a c3 a2 f6 90 <0f> 0b 90 90 e8 90 e2 e2 f6 4c 89 ea 48 b8 00 00 00 00 00 fc ff df [ 164.516121][ T151] RSP: 0018:ffffc90002edfb98 EFLAGS: 00010286 [ 164.522311][ T151] RAX: 0000000000000000 RBX: ffff88807ca80d80 RCX: ffffffff817a7f78 [ 164.530492][ T151] RDX: ffff88802073da00 RSI: ffffffff817a7f85 RDI: 0000000000000001 [ 164.538635][ T151] RBP: ffff8880253b0e40 R08: 0000000000000001 R09: 0000000000000000 [ 164.546703][ T151] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807ca80120 [ 164.554763][ T151] R13: ffff88807ca81728 R14: 0000000000000000 R15: ffff8880253b06a8 [ 164.563008][ T151] FS: 0000000000000000(0000) GS:ffff888124aec000(0000) knlGS:0000000000000000 [ 164.572057][ T151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.578806][ T151] CR2: 0000001b2fdfaff8 CR3: 000000006390e000 CR4: 00000000003526f0 [ 164.586985][ T151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.595004][ T151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.603114][ T151] Call Trace: [ 164.606512][ T151] [ 164.609506][ T151] ieee80211_if_fmt_tsf+0x42/0x70 [ 164.614595][ T151] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 164.621439][ T151] wiphy_locked_debugfs_read_work+0xe3/0x1c0 [ 164.627530][ T151] ? trace_wiphy_work_run+0x190/0x210 [ 164.633019][ T151] cfg80211_wiphy_work+0x3dc/0x550 [ 164.638304][ T151] process_one_work+0x9cc/0x1b70 [ 164.643337][ T151] ? __pfx_process_one_work+0x10/0x10 [ 164.648875][ T151] ? assign_work+0x1a0/0x250 [ 164.653565][ T151] worker_thread+0x6c8/0xf10 [ 164.658330][ T151] ? __kthread_parkme+0x19e/0x250 [ 164.663418][ T151] ? __pfx_worker_thread+0x10/0x10 [ 164.668821][ T151] kthread+0x3c2/0x780 [ 164.672960][ T151] ? __pfx_kthread+0x10/0x10 [ 164.677687][ T151] ? __pfx_kthread+0x10/0x10 [ 164.682354][ T151] ? __pfx_kthread+0x10/0x10 [ 164.687090][ T151] ? __pfx_kthread+0x10/0x10 [ 164.691750][ T151] ? rcu_is_watching+0x12/0xc0 [ 164.696651][ T151] ? __pfx_kthread+0x10/0x10 [ 164.701338][ T151] ret_from_fork+0x45/0x80 [ 164.705894][ T151] ? __pfx_kthread+0x10/0x10 [ 164.710551][ T151] ret_from_fork_asm+0x1a/0x30 [ 164.715477][ T151] [ 164.718569][ T151] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.725873][ T151] CPU: 1 UID: 0 PID: 151 Comm: kworker/u8:5 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 164.737957][ T151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.748034][ T151] Workqueue: events_unbound cfg80211_wiphy_work [ 164.754306][ T151] Call Trace: [ 164.757600][ T151] [ 164.760557][ T151] dump_stack_lvl+0x3d/0x1f0 [ 164.765184][ T151] panic+0x71c/0x800 [ 164.769118][ T151] ? __pfx_panic+0x10/0x10 [ 164.773573][ T151] ? show_trace_log_lvl+0x29b/0x3e0 [ 164.778812][ T151] ? check_panic_on_warn+0x1f/0xb0 [ 164.783967][ T151] ? drv_get_tsf+0x1c7/0x780 [ 164.788583][ T151] check_panic_on_warn+0xab/0xb0 [ 164.793556][ T151] __warn+0xf6/0x3c0 [ 164.797485][ T151] ? drv_get_tsf+0x1c7/0x780 [ 164.802101][ T151] report_bug+0x3c3/0x580 [ 164.806458][ T151] ? drv_get_tsf+0x1c7/0x780 [ 164.811071][ T151] handle_bug+0x184/0x210 [ 164.815447][ T151] exc_invalid_op+0x17/0x50 [ 164.820010][ T151] asm_exc_invalid_op+0x1a/0x20 [ 164.824885][ T151] RIP: 0010:drv_get_tsf+0x1c7/0x780 [ 164.830116][ T151] Code: 0f 84 3d 05 00 00 e8 b8 e2 e2 f6 49 81 c4 20 01 00 00 e8 ac e2 e2 f6 44 89 f2 4c 89 e6 48 c7 c7 c0 b1 e3 8c e8 9a c3 a2 f6 90 <0f> 0b 90 90 e8 90 e2 e2 f6 4c 89 ea 48 b8 00 00 00 00 00 fc ff df [ 164.849766][ T151] RSP: 0018:ffffc90002edfb98 EFLAGS: 00010286 [ 164.855856][ T151] RAX: 0000000000000000 RBX: ffff88807ca80d80 RCX: ffffffff817a7f78 [ 164.863839][ T151] RDX: ffff88802073da00 RSI: ffffffff817a7f85 RDI: 0000000000000001 [ 164.871836][ T151] RBP: ffff8880253b0e40 R08: 0000000000000001 R09: 0000000000000000 [ 164.879826][ T151] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807ca80120 [ 164.887816][ T151] R13: ffff88807ca81728 R14: 0000000000000000 R15: ffff8880253b06a8 [ 164.895905][ T151] ? __warn_printk+0x198/0x350 [ 164.900705][ T151] ? __warn_printk+0x1a5/0x350 [ 164.905504][ T151] ? drv_get_tsf+0x1c6/0x780 [ 164.910120][ T151] ieee80211_if_fmt_tsf+0x42/0x70 [ 164.915193][ T151] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 164.921895][ T151] wiphy_locked_debugfs_read_work+0xe3/0x1c0 [ 164.927903][ T151] ? trace_wiphy_work_run+0x190/0x210 [ 164.933316][ T151] cfg80211_wiphy_work+0x3dc/0x550 [ 164.938451][ T151] process_one_work+0x9cc/0x1b70 [ 164.943440][ T151] ? __pfx_process_one_work+0x10/0x10 [ 164.948860][ T151] ? assign_work+0x1a0/0x250 [ 164.953502][ T151] worker_thread+0x6c8/0xf10 [ 164.958155][ T151] ? __kthread_parkme+0x19e/0x250 [ 164.963236][ T151] ? __pfx_worker_thread+0x10/0x10 [ 164.968385][ T151] kthread+0x3c2/0x780 [ 164.972495][ T151] ? __pfx_kthread+0x10/0x10 [ 164.977205][ T151] ? __pfx_kthread+0x10/0x10 [ 164.981825][ T151] ? __pfx_kthread+0x10/0x10 [ 164.986440][ T151] ? __pfx_kthread+0x10/0x10 [ 164.991056][ T151] ? rcu_is_watching+0x12/0xc0 [ 164.995861][ T151] ? __pfx_kthread+0x10/0x10 [ 165.000487][ T151] ret_from_fork+0x45/0x80 [ 165.004937][ T151] ? __pfx_kthread+0x10/0x10 [ 165.009558][ T151] ret_from_fork_asm+0x1a/0x30 [ 165.014372][ T151] [ 165.017653][ T151] Kernel Offset: disabled [ 165.021990][ T151] Rebooting in 86400 seconds..