last executing test programs: 11.3051764s ago: executing program 0 (id=3312): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2008, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) 11.135755834s ago: executing program 0 (id=3315): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x7, 0x16, r0, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r2) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d0, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}, @NLBL_UNLABEL_A_SECCTX={0xbc, 0x7, "23aa226939c5529c6361a7a534da0f2fa30b4f3e91a657a08c45824c8151738cdf84e0fd116bd6f27d01b2fd9784e28863f2bc1115a343b2012bc11f2b636b60cf88bd6c99ec62b818ebfb993ee62a8db954ad52ecd2d8358eff2807359b8a3c8405f01a7ee78eed82fd84ed214dd3ce7e41032b0a207361a6b3aa665e1b3b2e3598b6240e2a4cf118e77682b369e34a58061685c61f15c1b44fb004234b7d12acaf2ea2c2a0ab780cfe22b4c8600bd2f0a42e8759f0ad46"}, @NLBL_UNLABEL_A_SECCTX={0x4}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_SECCTX={0xb3, 0x7, "f8053fa8e009f30e36d1b83ba47e51b37cd3c0fbea13cce820d436774246615b3a7ecb961a6827cdfedc229e2dbd759a6f4bf6a67653f1c7c9328e3d3c45734cf02c52a956e4bd0a26fbdf3cac946a05de1f74fb3a969217eccc49752bd6966dd4e41db074d7b7cb25055a41b0a9f0a345fc00f80673f161b30530ca34c99c5006dc8146f98504ec65ae25d5d0cd87cd1792cb970ec8ef349c8d7e33737c2d6074c39c2cdcbac2b3fac91631a58e20"}]}, 0x1d0}}, 0x8010) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x4000, 0x2003f0, 0x15) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) madvise$auto(0x0, 0x200007, 0x19) 11.064894346s ago: executing program 0 (id=3317): mlockall$auto(0x6) brk$auto(0x7b5900000000) unshare$auto(0x40000080) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f00000001c0)={0x10, 0x1000}) r1 = prctl$auto_SECCOMP_MODE_FILTER(0x4786, 0x2, 0xffffffffffffffff, 0x80000001, 0x81) prctl$auto_PR_SET_SECCOMP(0x16, 0x3, 0xffffffffffffffff, 0xbc, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fstatfs$auto(r1, &(0x7f00000001c0)={0x83cb, 0x4, 0x0, 0xffffffffffffff9c, 0x7, 0x0, 0x2000000000000, {[0x5, 0x7fff]}, 0x4, 0x8, 0x8001, [0x2ba9, 0x3, 0x77, 0x80]}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptyz0/dev\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/64, 0x40) mlockall$auto(0x2) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x89f0, 0x24) 10.892875711s ago: executing program 0 (id=3319): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf250300000005000300040000000500050000000000050002000400000005000200810000000c00018008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4000841}, 0x2000c840) r6 = setfsuid$auto(0x0) r7 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x440, 0x0) read$auto_tracing_cpumask_fops_trace(r7, &(0x7f0000000580)=""/4096, 0x1000) setuid$auto(r6) r8 = fcntl$auto_F_GETOWN(r1, 0x9, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d4260000", @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf2503000000ba26028086fbd9a2f0a4bfb3aacf614499dcc2966e96c7984cae6fa0dec6156eb0400a352898792404dda9c5fae4a41906e4bae68269b99f4c86fa73f90e223837ba2a78ed541fa1e874514c48cf1396a920f32b54b8f48ce625da88c7cdffa04c034dfe411ec628e835e6425c7d663e85eb55cfcea76b678951f9c63909e002596e502af7fb40775a1c1d2873ab2a104fc174b9aba4e7256ddd1a9980b020b2f34167817f9c9714ffb70102e380826e486b77989912dfb7ff3f598415f1693c1a61e8e7db8da5df5d0a2dcd69e039a92379a2f3f99442815071ccc7bd5ce8a4359290b18be39d1a3910e770213a58f9cc81987f86d078faf6ea147a9623e0d6eced4f74e05261f3b3128c23c694050cd4f9af5b79b8c709e106ca1bbb36af999bb7fbbed7da592c67472d373ad69c188f0e24612da9556659d6fb4de6dcd9662d013356884e99a60771e53a59403f180a483b70ab300693c2c9d3afc8b2b32e8637caf9646f56ceeaa7bba11b10d36630bce2c55e3a6ab1336eb4b738cce319747bf27d644a76d5bac07778a41400b400fe800000000000000000000000000017e36c4d37e613a0ed16dbcbe9745c2a92422b8729a7f9301e1ceec4b7fcacae8056d5b85aabcb61d3d02e0f872167a057296e2ed4670b21926ce30e1a532aff4091213bb8ddbd61d64ce1826793e69a821e380dbe3f58e2edebd8b34f82aa19d21140e834599c7c8329ee1c90ef11d60d39d6f94a5f88b02a8784cfbcb2b716a6c297c0b727b7e2c3ea88ea4aabad4b84e58917a207db2fef2d301e43faf1b93597c401691fa81e68d409d1238ef59e96f880e9007cc58bc0541ae108af07ef1b7a924b2c9f8b6a1d5e7a4c7a34a66ad82b84c47f2ab1f0cab489f76a0e65a8bf42de84b718289a39a1858265fb756677726d1800dc00883ad24b5dbeefc83d03a499c84612201e3432e900000029acaa215c1e62d6260043bfe20c993a3411e10cdc04b41e5b9f860fa96a0c14fdc9ffc688564e08f672e88936d812c8fcf558ce11a66aa33f901302537e7e96dcc5cc3754097bf76ec480f0b2d32ef9453fe173e4f6811fc892877ea97655ff518fc16f5a211ec61b432cb1c83f288eddb26dec66087d78d7ec63b3183304782df2906330a8495fa5b1abe844e73183ee743eac8ebe7ddb5c382f21ffc2288978fc6a4726fca0db7a778aae5e231080672fbd01806c65e843fb757f4af54d88cb97c71488fa1d6730643be5d0481010c8f13693853dc914a4961da193cfb0433fa23b9a08d87d312ab842c0b0c27763ce48faf3e7dc511af6851014f749a52a1616125703d1dc003380f1e67d6f994b861a7c7f0f67ef938562a788587851d9aaca17fcf35f0df76545a604abacdc1b263fa3fcb97678f5015b06d71b6545f846a6fecd2a0d6b658479a69a5b17ae54e7bfc1b709e38b8bdeab9567887d15dc7bf3b8208af9d824ee537c3f32c1f2edc67dd16a7d1d12e71b1930363407821a143d5d25d0d97cebe7e9487f944266916a752d316a50608477d566f6b37ded436938dfd6f59f52f60b2fc638a516b0151af6fd5d00dd85bd53102ed542651a3c9a8e22fe500ac055f13a680ace39e2b4bcbdacc428fcf5afc07704000b800400f5804a85e60aa44a0764009a1de08b5b425b085bde87ba7fcdacc99bcbf5f1f1daf581a9939137594dbf4f1636da3c06b27569cc350fa40078080f1e9c107e79468b3e3c094ff5b3767397208983e8d24574c66be7f384506b380c8ae5f73411d7cf3cb1d8d55cf1ecdafc977a2f65da1dbe9b4e6abbc8b6329f9b6e0c8fe092ccd49c94dd5fdb4b90dd4d5c5a62472a3535e3c48cd82772afa5dc2a1ef8bec964e3588fadc5f22e6ca6d24c85ab9c659e1f74a11a461a0a17a1fd0a49c1486095d8704f17c71ac34fccbc7580b6aa819c9c4e28c0790d08394226cd66cea09396ae8ffdeb9886aa48d33b7e94b086e083f8a0176f93e5e699498c109d352a1052800400d5804b1e565f0f286980124b3b8e88ed84d6808d6847acc2fa6662a633862f894ca961d49d7377e5a036e7b44f736189886e6381bc162eb7def61686f28be5894dd757a51fd23932f233abb5ecef31877c40e4123fafca08c09586e118e2ab4d04c8883f4b552f83b70565815d40e8bca4a7b139c23f324be9ec338181c4984d0396fd4de9b9774d1b6e393d20d36d7046379eeaeffb40f43928f2022dfd0cf5c91d77ed6049da273f3c379afba8432f2270cd6f87a1bae4f0832f3f8ae62a0e50cf5e21f156f62a1b55d6f858773681df66c4465698cb1d4aff927868158d4db98b52a48691ccf7ad344a02240d5223348242705d5ad54060aa0b7ec8ff99dd35eea44bcabe628eb2efe44f8df9160faacd42709e80f8bab4c711b6a1dbd997774314b7dbe2b0d017562ea19779003eded7c275a58bb32b016a86f03ea5b340783e8b228bc07860199e611388c9bcfe1c1e92a575ffa7259f11523fb39e6eb365ef1895b72cb7747d4ebd069b7d12bcb97cc48e3d304b43bb05a37674e0eadd06907e50d0fc69c18c9db30683674bae0fa187bda6ee015095094335a537a17881ac963df4fac0b222276fa2632b74c8eea82532c2e67bbb396a0680393a38bcc467b7c39464996160c5b8fc42824889a549c4b114accbe7d54fcd5d36f3708fe3e7c1c0262635074a41a7bf243d3e16ff9844ed91df8336d09feebef5fe53cb6c63392a6638fbbef1db0793678ef5dfdeeb45a42fadaa4de1ee842a7efb64669ec15c6aece8c65c6f34763ee7de80217cda63dc5c4590f7a11567091ee7f626867bc70a5dc7c7569b3ceff41171f889c3f448d0f46c9cb77a17cb4900bdff082f673de905842711a6b25c8ecd3b8cf28ae57d81dd64efb1dadff5f18cca065f651b516102b416eb7aa3b9f3e9d56a724b69123a66ffb347b8a324a69168f199856647a790df20f38340bf2f25d7be1db865bfd6edbf038147a80888850f78789077e87188f16a33c19feb63c022f7dd6375a07a02c7b0834d94463ac1dad04b1fa297ae6a8bf9e7560f8ded31a364b7c782d2b1bb661b6e303d43d5bc313308337685a5376c06c372083ae967382e763c3ad3c0cb211deb41211b9279929d46ae3d0c37fa26d8c5a2b8e7dda2b47c43cc6307b303b706105b02addf53752c3aadce7ee96e293c3e2ceb178b17710a2aa8c8ec246432082700a6bbb7f3ab4e2e776840138e56fa4fa75f67594216ccaad672d8dc69fd3fdbd9b769fe69a6d303369e9d58648d35070808808c6a8c09e5372791f6ecb6e017560093f8989c16e2b0d78c9dfbdf5fcde61ab6ac6f4e670db8170bbca63805c005d68072ce938a240dd1fb7702a43480cf05afa30697cb32f5550526a2d335253865156043aafffd6de2c570766c893d20009bc9a10d89dfeda6603d9c6cdb8ff09a443325d21ce5635ebfc7ac7c183d95a0dfa60031f921b058a9478bb228402d788973239ff4f2ddf3fe682565837eb1fa1e5d15c21b428f73ef20e3c60dad1570151dd013445f2b8e242dd938be515103c1d21c918c2bd2f2bc10c8f15f0ddd1aaa0d8a6b3c778de1f2535d60f0f903083a2246e98a2d19bc0c70c039a4db3d2b89e654a67d6b6b32dcc4c42f59af104ff650dceac84fdd997bfa9ef485d61c6f129f7461b38f60fe32eebdb30c7b5445f4a56a9026d9d7f9a7810a9796d9e5b163b6696f569675f5001141cd49ac7361644eae5a86150a8a53d9dbf1560e60c5f63c6e0df6314d46b708dab8bfafc9f258ff36ae1d4b67801c2c6f2ab441e045a62c3292a70e46344df01dbd605fcfb0c96a0ae3efd44b2334ad86affd60e69d2864b578aa8a9899c93139f5e5e9df19dc49951a7c58687d6d002fd6e8d012f834e038e50e3ae5272259acdcad64bda25d46c135ca0ce2fd3fdf94f5a6ef8e95d87e034f99bfa25897f37ccfb4d11618031145b8e179b261a2be757a4c321b1e9ab3b4e32f386b26f3079698ff479325092c9bd0ea4ace73e5e07bcb40b5b1bd2e49c60825761e5b82e923db33b1c233fb29107f8c5b584c229720c6db0c220ffce850b9be9e41170c36d805e63d394d0aa5cd36192c094dd1690e81a92364dc5fcef5815ebcb3a7e3b76610f85f17e05261c977f22d59de3ca4bebad015b05debf19c4c90ce22f41e170bcef79a5b97f1167b99a05f2652f1f328227e6536502298fd9507fda6479a3652ba2fcd6596412ffc81ab9fdf9ebf6b046e1b1d4ef5791ff49518ea3a2deee46db91309d1adc2d6edc1c5fbe14564bec6886b9efe01d68218dd1b2d6aa1c4ec5cad323b8f6e3bd8b0fc714a184ba023a5a40fe2499f8c26b13aabbe6cb0c9c823f8f8fd2c397baf75d026bfac5a47d7cda44615b7a942d93fdf3015d8f2a0bf183a1c92b8738f4bdb5233f868da6c4bdb82e811cc6c4185944df7193d4ba07ff711bfde155c3242d2dae6d85a4e87cd707ce02469c2335f4c4aa2855ee61196996830b9725a2d3cb9bdd13b552fa281acece615ce2a7fc6c37c07522b8bccfa57ca36245aa4025582c22667c7ca7528afa2a8dd4cbe4d5b85d1301555266333c172cff1c79b9ed1f284aa1288f9207528a8c98f925cd2af3cf3b2f8e596a69a24c41ee410a7f4afce12e07f6b565a5d0e21fbf34e77daf56895cf0b302e35817b27e73b4ec86ce06608b266509e4f4a9b5a0d19d9b8d3f1505b870ae4e27dda188a8eeefb25e921412d92133cdab1f99e0bc80bf6611ab495830a0be6ceb4f3b37a0803b814ef030f09eb121318d234b4be29aa2790f2939a7512d65000cde81a8f54ff29cf7e873e75c6a97be00915fa4343dbfdaf10e726021352fe4e551e666fc3744972efce2f369470f844c68c61d91de277a1a4f344de34f097d819c55ddf9da849c95390464fd85f9f4d22edc033d75934578d530e4160687fd3014d2d96e0e12a57641b929ffe3962279072b46a9533cd276a935350405eb96bb086852107e070e4be9b272e200bd6223a6555f4d9ce41fb9890fc5ee00373896e662c05bb578a3f8e558f09f5f65d22225ea4f98d1e8b71606a756e0558adebd5a105cb2773af1be7cf72fbfa66a8a34e824934a8dde37545ddb75918cd402abe1eb2b21499b9b93707755a7feb504b8c7a7b1f1907058e9708e02a3756b4d8042fe2e7fab8186368a3900cc02b22f123738d2a719d9eb5f62fc1e934335a44a92c0df3417015795f86b74cc1c0ac452522c2ad847a1e8c4c2eae604c6c639803dec67d6bd55607ec804678d69cca0324f44846f06a158a4fe7dd3d6916aa3fcd19fe8012ecb5669a5f2df519bbb607a071c90eba49a45db6b06534255d2073bd2adae524088efa632351258c968d5bed5c726b36d60af0ab81172e814c97a31c922f8b19347344501b5223c6a7cee8b21e08d4e20816d89b1427c01e4a1cc055e3d073eb54b92a4253ee1f808d52cd60fe49ce5bbad082ca24c225f4e0fd4f3e73466718b884d82513f097d883249b88cc40ada5621194aea09d4565b01a86cd08a2635a67d0726efd10929188f50323a089ef00d370eb54b9fe1716a40e9fcb3cfd1b196dc387d7375d54fc710d0b3d4838d6fe37d12f2df409c258a88e6138d99dcbb03d8f0d8f5b389a72608536cdb79df0289366489a87f5594f279d98ec3f849c451a3a94118e5da4e6e4f6b454c75d425b0f9cc64dc1614147170a0c2507e18d8304bc932ce6e7faa51da1e6001f03f8c89ba932eea8018515246fa6214b3c101480a05e81f1d0ef8d219aba90dcc607e44d8b01975f5cb38b457bcf36dfb4e8b60d5f7af42db426f98172ad330a4e66a7b87b23be96a42e7e3af90354e52051afcc9f8e1df253e331cb0338b4936720365ab31d682272d09a4c0c9301b4d2fb0530a29fe93da9923bc3d23de572022f81e6d930dce36c16eb3e73cba4286bb163b0ef58bbc7b5f97dbe485d221470a6f8fde209658e9175223d9bcc2aeffa4c70b7f00937a34e89aea8f41bdbb3f8b7d3b6cb2616708670f027388965b09e97a841f6ceec2a93b6847118c00c7969f63ae3d030c3d37892d74128a0e162bb9eb27088fb4c040d2301f45d302ee8b46507a19008c2da46336709b6a5c4c79d6fce1ea296b33421d822e028939b6a912d7a2a0af0465e2e3905386067d48f5cd8f49ab32661c554756e414d1c41ffee6f325a6b152b5961d9841af530d70def726e35b2de460fbb31c50b95e760c6515727babc4a103420d42fc96f1fcbe41f8054a99e0338bb4538776935beb10a89b5031b093eb411fdc8dd58832821b6e5ed833a111c84ca03eca43d0cd3caeef6c76b3332ba7c7eeca9da7b0e86d0687c895e7dd5081c552669f846d924986a9d9faf814c9fa9d4e8b439c82fc1247e17531ea3283924270317f9e62a5b29ee9f9f6b192d4a88ea41a95b9211e4fd09958363fe6ba86820287503e54d65e81939b9d6849fb6ef56c766cc90559609ccb365a397af2064fb75b993ec3f845c62b7c60234673d1da98d70ffbf7914d21f06d647b4be1b7ea403151dfcecb52f31d1b7e8906001e7c3069c8d784d7223228c7274eeee97fc125307f62600f54fdb06b70e1867a0874895d05534b2b7329cd766d7c8183e3ce024aef5c983fffb91eb03cee0ab3562946ed07ef2386b9e66f33fc26296fd6b6838f7494f05b7326f1c8ca6ff5ecfb228f981269e4060b9ea3fa6930bc14faccf611d75ddb3c21a3889b3e4119b3e2a8f25c1b605d9dbd96b66a2d0522135dd536624770c06143327ad983af8d4041d903eee556cb1ce8495a0034f5a71e8123ee3bf68a3f033f96db08e804607d037f9964ab29fb17755e266a971c78ed6593edf750fc0ab314a0283871b6ebec590eb6b65e0cb76a534fbf96007f8035367b15f12e11780858e3c1541ba18e582eff636da56469cce17ead08428718bac05f5e60890eba97c5bd788941305f7b0724246bb10adcbc5bced4bd4d6b1ae1bd5a820b7b17ec74d21c4c95290e1b85f9c6b1a2ae65631588f586adf9e81060cfbb70add12cc0e7a6b8dd6259a2d78c157cd41bc113f7fddc422e28bc159dda5df6e59be8dbc85a0270a4167605056d284cca490e6e4fc7ea639b9dd5c8215d3f96fc89d2aebc38ae562206abeda90d547da1b437cfb3427cb191530d34b1458cf217de22c62407bbd7b5c0b368214ee67fee8bd3a762ac09c75f70e0b564e24265d638e908cc44ae2f382152bbd6637ab41f2183e3e81d0af6156a22a44a8e2ed9402644c0a279f94d49a657935438b3da95abaa5f2fb7d8f24c0783f25c04da3176b3abfa4ac84e751a4a609c8277b02cc5bb298e681b3490e3c2b2bc3255cabe7fbd9a75031282774b34d083deeccc462181f772a929a6c289a11064ffd36039f803826d30b618a6010526fff82eecf01539856603f329cf8ff4a1488c575d4abd438e31234cfb9cbdaf0a329fa65ed743eaff23f73b83dff71182f788e92b3a97b9a5a6ae4f810923c87bd07b8786867404790635662f1d9a2e2cd54d8fb3d7fd2659382b26797e7a5bb2f311ac781c8a3a4806cc3fa65fc21f017f8d2c0bec81c5d9aee3844f82528db20a79478b44b1f199369679db5489652684cf3438a11666a244453b5f75cf9909afe49c6732b8358d1fdd9ab3534d7eabfeb1d55ca2168c35e9525f4eb3fb240bf47f6f74739611eda701b01674dfa166d979e80bae2426a734417cbb5cd95589ae989b647174ddca51df5662321d4bb460b91567d2375f937f7af21d781695529ecd1ec2d3a7ad77fc3a123040055800400a38066e4e5aed8f1bc049fb0a15244cf0d0e2cef2dba8c947c06510200000800cc00", @ANYRES32=r8, @ANYBLOB="cf101f8008002d00ac1e01010800e100d70d0000080031007f0000014d00d5b3542df8223b1ea655e365596b1ece0c8dccdbaf5718e7f10eafba1279962792400e6cd4da8554b2dfa3398955c16ae34ebe970d6c1c55aac8f1ab9fbbfef4e96325d3d4cf49c2adfb80a9f414c72c0c6fc09d42cc764a4a7c99e6cdbd893abd864ef08a97ceffd8de1aec33753e4597faa97ae93a750399743a7b2b488974f000ef01ea76af553f68a3ca04b227a94650b8d67568e41fb3f30e3417d6ff667051a7ed901f0832252ea319c055f9bc17175851f71fdbcb7e06f935fcec4cd461cce1da8bb2e3b5830c9bb352d17abaef1213c5d5bbeadb9eb71ff7d9e11942636a17910e72c36e748a786fd3bf4ae976bf94facf007d0008fdb36e26907d71ba38c08d17afe3f528c37aad5cbae526a3b880a905f460baf10ce86618c0020674c8bcfef677d9e08b958f1c7d0cdf93488257063f95984d700f7a9272cd4ee793be6e652c86206874c45c5b123c70478a3ccb72c7185a5b28171fc4fdaa0c23259c0abfe60940a2cda24e97c079f2be12a7463a0ee061f0689b3caf1128617df7d8b9f170e181ae65b84fab972cafd76f066e86a06b309197a9dbe7e2d068f43f9feaa25f2bb0fb6c8f992b2a7df9203b2b98b37ee69d2ca71f659bc9e12c7b266c414423e34c15465685bdd72038a7ba9a8fdc86149698c0688f9a90ecdb9f4602611ffd0d730442829ccecfcb9e1de1140c69d6de80d29a64b833fc683b513a78b97cd2fbfe4bd36aee3f3099e1f7e2954185a1cbdf573a7bd6198b1eaaad26e0c8c6bf35bddff7d6b1fac690497c79dcdccad4f0acb467bbf59529681187f8cac4c5d19622fba7745111ff514b00e9181da5e0b96e9c51bec9b350603d46fadf69c495023601b10c7d792f1c7919b0f278ba17fff131b07d5d601157a085fe20141a15933413cf0cd4c505d39244cbb66fc75d8d362c765663ee669621983b95da4356ea2ddd8c1853d0fca9fc7464ff3c2d6fd676fa78067666e9b4b8b7a78a1b234b4de6750ac10b99110727c475d0e72a7e98e7e68a80d2b105619529a8a99b7a53366ad5016332944db79521efffd9d788e22c26f850b7b4a4ce310e6f89029c89df10a6003e7e7888f525526993cab19cadc67c52cda0eb2b7d6e43c4c470cd3784816363d62e29eb05d899bf39a59e81aa115b9716cd8adce0d2ade6906eeb3c985e213fe02bc955745288468dc593c54e962bf95ae277a27dc20539aaa63554c3af9760cb6c266e3687e0fe7a886eb8f5bd280d997295393222ede16df06e31f0e07cc63f99db6df1ebe908562753afade1a523499f479353bb26033a1b9b4d7df5abf0d3b2762bd6ddacd40707a15bb04556f5acdc507b08cc22106fbe2336af79449cc69d36e0db72ca5fedc42a03ad3e4f1147701dc172841f9c2fc1580bff474c9ed92b6addb538052f16303be584c7017fdd4a1465b5acd5c0daa2390238de98b6927be2319eef6d39083d8183260bb7c565d9475ab5704cbfaad7ed95e8c30cd3d78a780c642428dd54a1f7e2cd1d41cbf370bf15c6a41f9c2159a2abf4af53de34e59c567afdb4c2f2fa44c9bd6af885f713273290c68d000009978fc39a6996e79a13118374a59b7b2f4700341aea1236e5f74418e3adc0c74048a476d5b4febe94392583ae9ccabe37c55fdea44737bcd5c3437f78e3b3cc1bf8e9d1a98819755b9e98de53a43f20dffb55bc194669ba8702d6681cd88b3dcb9da391b1f66272250c6cf4217d158929d52227e029c1fa26af8e806171eb7307d9bd38c10d5ce60c76f154b650d50cf61ee5422bbea301c89100fe4d739a095986251362541ad2ae47bd612910d4fd0711107832569f2df96496e95697f7552b89ce6a9c1579d1ffea4e8179e61ca6d556867dce4d8da58890d9a18dcdd179cef52d4ca31fa4fe87be76abe8941e75f8e185d71ba7a396e8896b88886c3ec48f8423da636a36046f9c1d58e32f20cab2a5455640ec3637d2c6907fc639690c4867cc82987dc04160d0fc1cb1a3e76565c2f2b5d16ccbcb497119f831942d38a9745dbdffe32763862a379507be707860e14780fda2e3fcedfd1c5ae48d4fe55634bf05537a12d5e0f5385e491b5214ac849361b9be90d5085f3e8fe203ea06f85bc603a3a7695ad594a0796a69c812c7b6879edee556fb2da0c9ac7ab98af0a8449bdaed1c915678f367deab227ba2abb4366b6a5801f62229508a843a7f93203dc089bccf1c3c64d94009b4b584bb7f2f360dbaad5deaefc05cd3a01616ddfee055cdc96d27b810664512a7bde301b5b47af54e22fcef13ec732280a96ec1affb1a6370d1391f7819285bf5c2757b4513aa2f9129d0104bc9518ea4a2daf7b8478e086313c3c1b0df2ab5a7a48d0b042a35e9c3647031007596a13c4dc5400810b6a208b0a0b0689feb16acf387277c7331c8b685da3b8bb8bbfd2207bf7a10efa4e1ea93897d0ffe80910080087f2d5768d9f066b0f7cd240d1c0b0ae2935d51fa6815b87d240e2ee2ed2bacc122cb57396a4adb643f1d1913185c1d35e40ab1883026f85ab19ac57f1d51b9da69ecfe00b52056d618594e5c84b63660463f4f46e862cdcb26038f1e710899c3a9694265a1b27dc943ecf25aa17ba0288c953d68f81a16936960e115132375220cfbe322818b6d6eef491065928641c73d87dbc8dd4a68f4aa36d14e9c3355a675d2bf744cb90ffe33840f037ef2ec18a005147e46440bfacffb9a4acb75c148af4d3ec45d56f0b94c518a80b882791e5c003176d8086862f8ef77217e355bc3bd228ee8d149ac46893ad4277483ebb717aba04d9533ed894ad7a8119e2d42d272205645e5cd20cb5c43a07e47ca6a8c51e6f9d90157b0a711c7ca41bec0f26f48555006cbd5e183c6952727138258e56b962915394e723eea6a55ae1ad7cd9695c5523186d30af447aeb62063aaa19f319eab03532f332cb70d92aca5a0094b0ccad2b000a7f2a2d385421e0075f29fbb052f4609491cd89fd78c6bc40b43b2f0421ddb46dd7112c00a298d90cdad66cb5097bd0f9e1cc3e6e3b1ef10b501e372f2be4632354b5f17d4875bd3d7b3e8c6b39248301cd64c630cc419b83477a797d03b2138f3a2f5ea90586debe18b9e4790a30b8eca7da8cab3969c2875667ad3107a27c4fa055775e5639aa227a41c72b83cf158a383cbbfa2632f1c37f867fd2b56cfdfbe03fed4132937b541073a8ab9af5fa9f991e27b3b6e5525eb5775907b1be29d65c8e2a7875e6b7e0c853378590cf20f7c7692ec66813ed307098061dfc8f1cbbe29aec9a32553d1229647a7856a331b1a5d8704452f4720e3b220cc880685f3b9e02af9dc1aaeb8af839da85ec53bc6b82417b102682f4aac36156b123f9a90e4ad5bf5b8eaa4c8e24027bda1cb4e023f3722ac858947df49a81752c9504dde6675351c354036a547154822c139a6a8ff007162a6f2f8636d9a5d52091934fbaee6193855676694585d033dd438343b4f870b55cba66b906104979a2ab22597fb396df1db182923693ca402aed858712deeb08e473400cdf7ce1aee322c89aa68a2b64fcfa6e222084f996c12a99c14ebb9d3f96e5ef4ac768ab688c97e0cb599b2de3305bc26d89f09b376c2f2f4eb05c7c1d21ea8dca1d9d042550641dd3bbbc2ffccc08ef6c2bfbf212c022d5d24b947738672b4c48014f40968fdcb4f003ce5b9cba4c476118a700406c56108dca461f1f1c31ed96eaa1fcbf3f8649111a83cebadd9297cb2a391a1ab942878e9032398c54b67057b9579d6ec0fd251210c347fd163a6ecf281e8d9b5fecda47c11932c42aee2e6d6af922213f5723a4e9ba2d4f7a5c5f36e560d5662824f227d188785f1c5c12c72d70b4d465ab07f11ad6147167f5936393ec7cfe831e8c2c3b4bf2050a3ca29de244caf97c0f50b8dbc8c068415a207d780e094ce817b5da581b405c314e85e1699b0e76aa833e290b6e0a46451dc4ad63715d1462bd40cd733417d91caa2e49c3e19ddc4f1eab7eef05d3da635b84a0446f543fb91f89a80bf8682a230f0aa2dbb26bd4c83d10c1c28b71b87b0a96a05884f7fc2175c7448911e60f539faea6269ff018022a8fe6da58708784f2f9ce6f3de9825ffea740d883a29522f18fd84bb24f3817486f43612b2ed3ceb9e392712dd205c5742ee6c7e9438c501aac6d0a5a1b561bc83c15e5d3c8d095d5d9a965a4c3a80d83038f273b353d660d5109fa46b7869a11ce0062b737c3ddc69890eb2fec8ee11a8b3bf49cf0ecd9fc6397fe1551a98397ec72939e9dc5690d97070f46d6f70d0679e0b8d2eeead770e067472de329ee7b5760c8c9bed5a2a7b7cb7739cedbca3dc6f3117c2366f0abd6cabdaceaffcf9516b0810a03358aaf4c54dd9e31b8b9d495be5dda1eb84db358642d260e475281ba3032276d651481212b37c5492cff51fe5f8d5fcb18ae6a455e18f3fd7484123120dfb6f5266b260d2896c1c75c47316930435665927212cd076b636339f66dc262fcf8707e9e025dabc43dd50f5aed2abad7e86385ff0af1e4d1c1b451d27a6432a51385fdc8977bc5041a9a87ac3c46066bf4e2e502736cc45b6254032e56942e02f5e602dffdd87b33146170d911a05e42ac339c7a5e1e51f8789ebd8c163cabff3c8a171738cb8ba68ba0a1965defbd9bc652c8b3877b01f03168064e30ab539ad622694736a7c5d81c840b4ed09328e93118cb31b57ed54c2c1e3486c23ee1c935fd8b5c940f6aa73a9b7e1e4bc141fc831f0d622d3d3e99a887adc81a8d61871e3260127e20c0722672e65f086c124b82739eb3aa729ab6463bf3a02d7b09bd879610266307b8cf66186031d4efa454f78011d0897fc11a249e166ae2a058461730d8fe06b31166bf932c597015de5b6522a37d98b5295e20029d3c7bbeed4659a0de8095bb5a79d9cde5d799cefd549b22e98d673da26504329ca23c13106edc8c77e80c41dbf234e4b3f1c5976ca1b58b08f45fd6143d825c78b938551189617ff2466de09f8fca7e6431bb0cf48542b8da21c395d5d5b1e1bc69d263c5815496f89e8d30d0a6c3d9658951bfd28ec01388769830a21c9fa31e2d1ce105d02104f691ca565a0538baff5f11fe237eca12c777c02c0d7008e41f060ace64e09a48781b09244c75609f94b431fb3644760919d102e577ee55505151a67934dbfa5826466b65e9d48522062177209c85e0ee96cc0d3db555ba65d805489560be583d0ab11cde5d6f4bed57eb00a10e2254df8e8c466ae0477506f5ae03a04805b8da3734aec3ecfea75cf1ff3acb3c4d11624f38d5f3c45e674e51f808caaeb459b18e0f8a9fc4743c6079ce1b6c6666c47f0e8aa513ad3f657eeb11c42894652224291b41fb9a420281b765e3f33cf9ecf77f0d4842c261442c50dea5eda2181b308161ad88a9e060498de8afd8cfca7439a96c0b419c330ac6f7cc1d7fc2d874d2e3864f0373c67e007c3fdd7b33a213cd8f44b02c4ed2a3f637159bbdfd5008d12a00435bd29910aa7a7ce5c85a3b4352fc0f860b247ded76edc56f95861c66ef404088d8cd9472609f31f4df6265f4c589ebc530a215e2b9a8c85058e9c2736c4b3acb77e4efe1388423c69a91e3cd65af37fe4b77f5e1ed65627862281c64b4f20cbd16ed06ba5b560e1a15fbca79578dd1a7398a233a9afd2f7a4488c3e32198b2308eb33a66d78026d7bd1f96346b82077f5ba9f91242db6c7e63b28da7ad6d054dc68a6cc281c85b37a2840987c591c1c07b59ca549fce2314c13986aacb8814b892cc93faad93424d3af4bdf8af5ffdae230cebba0bc037ac56ec11a5bdd743c127bec8cd638a1178638dc7435c5330f622f6c9a484eef4a5221603ed354fbc19510827f21280333018d302eda61931947add044ce0bb49aed23bf1893066a1e85742f03f854214563fef55d8813ae55d37909dbc22fabf937afb5754321f35dac0d208bac683c7b3d54ae40b66d8e7edc4003e9ef23b7b2c3c4580b85c4ac0e895804004580040014800400278004000b80edcc8cc4000a00168004002e80e0df00000800b48004003a000c009d00000100000000000008002800030000000000000004000180"], 0x26d4}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 10.776549269s ago: executing program 0 (id=3321): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/dev/cdrom/autoclose\x00', 0x202, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300200000000) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r4, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @uid}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0xffffffff, 0xe600}, 0xf) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0xe426}, 0xc) sendfile$auto(r0, r0, 0x0, 0x1) 10.660389884s ago: executing program 0 (id=3323): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000ac0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x94) 10.024660683s ago: executing program 2 (id=3329): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) socket(0x6, 0x6, 0x8) r2 = epoll_create$auto(0x4) r3 = mq_open$auto(0x0, 0x5, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/wg0/accept_ra_mtu\x00', 0x42040, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000328bd7000fddbdf251600000005000200030000000500020001000000050003000700000005000200fc00000000000000000008000010000014000200726f736530000000000000000000000008000100", @ANYRES32=r6, @ANYRESHEX=r4], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_OOBINLINE(r1, 0x4c9d, 0xa, &(0x7f0000000140)='[@\x00', &(0x7f0000000180)=0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x129900, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, 0x0, 0x7f) 7.632984348s ago: executing program 2 (id=3358): sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000ea5fe7152f4546000000004a71bfa88eb79be92a8d50fb0371ed228e0060d80f0d3e51f87d361a1ed13fe8a7fc1b0a73409174f84e70cbaedab4d0bc3c6e0470383e534b8c6bd4c69e8e8599172a638034e07bae0aaa254d4df69a72e85c4e8319552f485aded66d220096088d0b531daf472956b24d81a485e5387562ccf138484f0d4c6e7eb0", @ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4004) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r0, 0x7fffffffffffffff, 0x400000040000005, 0x4) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdffb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) io_uring_setup$auto(0x8, &(0x7f0000000380)={0x8, 0x100, 0x401, 0x6, 0xff, 0x2, r1, [0x26, 0x6, 0x3ff], {0xfffffc01, 0x4, 0x0, 0xd, 0x7, 0x80000000, 0x7, 0x2, 0x10000}, {0xb, 0x8, 0x7c, 0x1, 0x7, 0x1, 0xde23, 0x8bdf, 0x7}}) 7.356480642s ago: executing program 2 (id=3362): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) (async) r4 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000080004000900000008000400040000000800060000000000300101802901048004000d80040049800400488004002600ad5d079172db3691f31015fadd64b9c931790efa342d19514b7503daebc29a40309d5c7953853d16920c55059408001e00ac1414aa0500460000000000f746e4ceb215f9ad8a0b3d3c0291e872c69279e298f2763cecc21bca1d5023aa95adcffdd1d45d17d23664c07ccd27046599633761ae38dd2d1382aff1a1163982df04f1f23275332711104e421d771ddda8fcee19e1ed3f79f52e0fe787d2f2af50f256747bd0aaa67390631906ed21ba4bfd683b69ab229223cdc1f014e2c991d7213b162d3b7c4860fb679b7e0d5cea2b70b470b6f02ceb846f607067dcdd158a0d9afebd432fe560f985b78cb61d88d2b3145a74736efee47c57ec42c7cc71dd1e4f0e47807f02e40efbd83114a8032604911d92e4df00000008000500040000009add9b6a4cc5aa1783dbf741f10cc6eb5a4c9335975aef1ea76672d0412f067f69655366c3e10f4f7b68d76d3afebd9e342f529ed7bb4d874ffdd64dd26edd3cb53922b816d2f61bd592c5251b5d0a43fd1c0dc5de325348fb48ebdaab8f75446a0ea51c8f209118b9071f9b447c98163e5da5e3a5c9875e4e92bc79dbcbdf0f0ad689ee49adcd05f04d1203e55dba35c1ad7b80a950b530"], 0x16c}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) (async) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) 5.47683492s ago: executing program 2 (id=3385): socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000340)=""/156, 0x9c) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/248, 0xf8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/attach\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x3) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r4, 0x0, 0x1f40) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x9) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000000440)="91fa07e40cad070a6c517da7", 0xc) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 5.416960709s ago: executing program 3 (id=3387): r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$auto_FIOCLEX(r0, 0x5451, 0x566) mmap$auto(0x2, 0x8, 0xdd, 0x9b7e, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x300, 0x100000, 0x7fffffffefff, 0xeffffffffffffffe, 0x1, 0x9, 0x50b301a, 0x2c, 0x20, 0x0, 0xa}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0800000049b9207af29ed4b8b26e3c33924987a9004e0e4b378f09b0a2a51d2f9f126a08cacabdefc070b8a246ed725b34e7b67d156f71e4cba6ed6548d8ccae5c1ee1f66bae321bd824d0b9307a397b46f90aae5c491142512cb56de10acc98b48afdcba660bbedff263354edc8583e09ac29eaa91fad8aacc59cd420", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100100008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) socket(0x1f, 0x3, 0x100) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendto$auto(r2, &(0x7f0000000300)="14eac3f2b1730937d5255400b951f344d261a3b33533831a571f8759684a24808fc64a38a884cfcc244c7365ab9593adbf7ae68eb64cbaa49476bb9f2a47b689a0d6b6007a945cb57528b9296b35764cc7d303bdf4b274af44e33b2cc64e84a3c9f315979b43ee58295b4a2b53448e5a804ed98e699b7f6e9a00e6eeffb31bf0544723cfde8616ca41a8b94aa2a7d659cab5828f48381205f643cbb7f91f63e5b2b2b6c37e7fb68436aba2c0063e6aef8a0baef3938da8d88df5cb1ab72cdb83f266a82fba0dc39f21fd15dbb323728c4265e739f3e11175a1eeef2dfe490c5f20b9fcc9f40b3e2f3dfcbbe851", 0x929c, 0x4, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x40000}, 0x15c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fsopen$auto(&(0x7f0000000000)='/*\x8a-^/(,\x00', 0x3) 5.174183281s ago: executing program 3 (id=3390): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x46, 0xffffffffffffffff, 0x104, 0x2e) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x46, 0xffffffffffffffff, 0x104, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, r0, 0x8002) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, r0, 0x8002) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttys1\x00', 0x284000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "551e7285968d8e86bd4794a0e875ee9f7b35db28d0a7e72b7a19039c336389cb57a05ba0582cc612c6c0be4beb4cc54d8337d40c93638ba34c4a0435c32a206e808194584d8c359d418662d18943a5e3c6234e712a096205457b56f0a1e5d4d19835696295a54f38117d9d751e23b5fb61daa5a6b2c75148106dc167a20061e3fe55cc53ffadf62b0945da4b27515a0102a8d2d002a842362b4744b8972a5e11e8a6aab89c7b85947f3901d696d459641aa7e6b89b73387ec5fa2d2af6c992213d82c5774c4bcd4187585bcf652af094e988e75002e01f607abf5e25ae0f5548fd13175b681fc059c1f9160aef893bae78cf6cf62c30fa3f0c5c60cbe383a9c0cc1289519b0c7cff81cc3b4fec739fad19c662b0f98d607b61d825d10e2dd3b27b0f7a6b1adc5a452f344c39da5f086ea7c5d99674ca69c4f5635776e67c151bad72f906cd65231da3a55d6056e23b00686723714fabd752f3e2c86dafdee9d379230c0abeabfde9cf88cae099f3ccc76ea7e64a3734ced5ffe749a8012db53ad4d6a5e347bdd83bb409c1bdb762f4aba145df74833d73ccd583797d4fb4ed3e0c7c29d502aacaef02e114d9e60ca6b0bcb28f825f5d49e94ccd2f830933c39a3ba3782505453e3de872ad8da84a6a22aaa62970428bb9a95d1817dbeeded1c53c5d508dea6cc53d80153b05f954c263278bb9c8bc02f3b1805dd9299dc8b97ebff0165d615ba7bf5ce8c490f4dd273642a18267b0a61a594cb1d608f3dffb292991ea32bb647a6f9b951f283e118dc73b45843b5aa883410e402e3bec9ba889ec237462042cedaed761cca0c3b7058d3ffc276c9a75e18b79804f4e21650d911edbedb9fedd31959a8783b1e39d7d6408554bddb2a5d67703d225fe4422bf2367ca483e77fe479495be3235f4c77b3872a9e33946d2602486b83e84e7d8d1742d369e2d00b9dbb552385502c0f597b3615bed54de65af106b58d2b6bebbdd3fe625152527af965b67e9424da7be2e2574e1492aed568d4faaa9da508e0a2e687876fa291e38b7c3ef38643e2c49e0d46d0f2d53352da2f184c4ced2305865ab0ad1435644419773ea82336ffdf62dd325a6a8b2d199d96dba8a13bb5a86ff65b80818ceb37ee8a2b2a8813b33e474e5b110e1ed13dbc4f52efabbce38935a8ada53a0ed5a1a01453a254a1dc528492159591aa192ff6cfa0b372caf236c78d1a0c94dc37916746358b4cf3cc1c0132657818ce6465e58936dbf5991dfb74ff97382c066ba0ceb06ac4f0c005e4c9166e94161bc08e1c23df7ed3419b10ae229aa6bafb19e6af003c9e319956723d839dc50a7edd8d80bce971ba504e0aac811d76e65acffdc4f7e9836396ba98b824be6cc704c59f5849642b191437a5cf902fc1ac491e8c59241586c6791b282b5cfae57eb7e6792048c4769b5b3f21987ec5097e530fd001da5d2999db4ded708225e9a53a2b48d2be3401a063da3c19168769eccaef710d7c2e06818bb05c4a9aa0ce2785a5a6d2846bac9836f1905a9b042029dcc59d918450b6affb522fbf78116941c5cef4ecb82a2134ee8e67ea6091170b67bfc3abec9e2cfc8208d4ba3bb732230fe6a9470c1152ebdc31bbce93cb742b4484bc1cef4298ce897a36c7e8b3ef8bd1b0e3d4dfa46da8bf89b06d67d8a5da465e8f68f999ec38ef8d1b7972125d2d8492680f6698419313afb74b5f715c90aa5ca0a6ea5561acd89a25d0fd066234b1752d6535251be347d8e69afea162f0ae84aa08a1a5475e6860af5956babe0530b6349e918fa97f14e6a83f7e2054c85ec37424757c49c6b76a889cde8473eebc495ac1088fda54f5c70bb17ef4873bf7b524ae892cd8267adfcd1e7054ac0c8b904855f816cbab8a6c5332d2221060b97931130187e1f07b0b9fad917c06f56d3f9fbca9d0ad93c300d88a6025359eb609e86c2b604d6834cde1351ccb0ba238715d6a77953f58b23a78db05bc38cf1e47d5336226a966af0a88fa19b4d992fc82310b7fceee45a202bfdf759dedee618361082881f91f85020e5282fd6a4ff376455f09bd1ca73b165498937eb7396525f9be44e1d5455f2fb0e9b0d79a2b05104239ddb65afabac40f2568353278905243edcffa25dbe93c91fd0982c77eb13c90cde8107888e9891ed1f3fd75b91f275544db3fb132c587243bdd433ad395ec44311df726aa04c20709aa456adebeba0e42ba8be3710f9e8f307febbb8bf1971d6e02b435ec6e209f6d3e3200f51b17e97c7b8eed34b6b297b03db790c857329989e778133d2f9ca40e62aafa5a053d416a09d36a78e1b0716aa049da6fc9fedc96a02d10a13260d6f7cc86a7c681b97ec9987e16bb190e75137bc3e3ce64b51a599f1ebed0683f55240e49eeb6588a13b55c266ee997d1b237f0deefa3bd5670293249c6e79decfc6ee39a08d1ffb71231ed36b9aea01fd0804fc591b7100e6cf5cf97ddb1871afe44a534f2eeafb12d217c6684d474f19bf7d957b11429843723823da2e555a9a9f9d5af6d1ddd40a59a67c459581604f280f4412b0a4b8736bbdd1cd2d4d27cd273ad39d3d52036832e968f93ff343a92f4001c8a2c43ec1f3377c67f3b49f6297de1e2dc5a10abafbf034a029e5d1d89e627fc3741ab5fa68afc24fdf22b6ef215e0927fff8bdb671ef6314ecaa7a8397292e699b693600e49f9e428604fed71f05f2775c224eead65c378539b80ff7f475c68933366da1f76e0542991277c4147358c34ad37a5d81bd1810f39ebf7ece6a0054f4bf5f846bd95f9ba31ea606c226d267d95ad95c29b897fb1fba58f121939ff3c41535d119"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x4, 0xe9, 0x6, @_sigfault={&(0x7f0000000d80)="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", @_addr_pkey={'\x00\x00\x00@\x00', 0x6}}}}, 0x1, &(0x7f0000000180)={{0x3, 0x1}, {0xffff, 0xffffffffffffffff}, 0x5a970284, 0x0, 0x3, 0x4, 0xa09, 0xfff, 0x80, 0xcc, 0x1000, 0x3, 0x9, 0x31b, 0x9}) prctl$auto(0x3c, 0xfffffffffffffffd, r4, 0x1, 0xa) (async) prctl$auto(0x3c, 0xfffffffffffffffd, r4, 0x1, 0xa) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r3, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x298000, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = socket(0x15, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x3, 0x8001, 0x2000000000000149) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000240), 0x1ff, 0x194}) (async) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000240), 0x1ff, 0x194}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) close_range$auto(r5, r1, 0xffffffff) socket(0x18, 0x4, 0x202) socket(0x18, 0x5, 0x5) (async) socket(0x18, 0x5, 0x5) 4.410628955s ago: executing program 2 (id=3397): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x8, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) madvise$auto(0x0, 0x400, 0xf) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x101000, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0xfffffffffffffffc, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x10000019) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) mprotect$auto(0x0, 0x806121, 0x8) 3.561264283s ago: executing program 3 (id=3408): openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vgem/gem_names\x00', 0x62000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x2) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)="e905") openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/audit\x00', 0x169041, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="00211459a600fbdbdf2502000000080059ce00aa3f6aca85ec4889cd3d9928a8ad434c152aeca20eccad8ca56e6b1e48d9a7a2d7eef502431d928462551d632bdb3522752970cab95d011d10ee491ec072a6536ecf2a0a6b9efd846fc543eb9642d15f1e289b79e8f852b8b9a9d9506ce80208438ba6e6b862ac4401bd80d7993cacea928931e7d0fd3b69d805b07d3b0add23d331ed99e5d4886550b32d7d261ab59c67e7c530b12828aa7e078bd600f68b685f763cb2b6bed413426ca8fe91c4afc36ff2fa64fa44833e156c83466d28116859b98b62ab705fa0e93b88e16ac2a02b00719b8cf81dc76cf30000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000200bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x80184947, 0x0) 3.443703586s ago: executing program 2 (id=3411): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x53, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r0 = fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) setpriority$auto(0x2, 0x7, 0xfffffff9) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x29, 0x43, 0x0, 0x9) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rc/name\x00', 0x2, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x977e, &(0x7f0000000140)={0x8, 0xa, 0x5, 0x5, 0x1a, 0x580, r0, [0x9, 0x2, 0xffff], {0x5, 0x8, 0x4, 0x0, 0x0, 0x3, 0x1, 0x4, 0x100000000}, {0x1, 0x4, 0x6, 0x80000001, 0x2, 0x3ff, 0xfffffff9, 0x5, 0x3ff}}) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xcb) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) 3.258514147s ago: executing program 3 (id=3414): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, r0, 0x6) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x145543, 0x0) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x2, 0x7) r3 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(r2, 0x9, 0xa, r3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./bus\x00', 0x22c0, 0x154) mount$auto(0x0, 0x0, 0x0, 0x339, 0x0) socket(0x6, 0x1, 0x106) 2.244839682s ago: executing program 3 (id=3430): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f00000001c0)={"8911bd3a", 0x1, 0x0, 0x6, 0x4, 0x6, "feaf587cdf4d2f534a1c88d3e40a00", "e6cf6512", "f34cae3a", "10a991b3", ["3ae887a128f1d8c79420d880", "b11feafce4d296d8c985d069", "0149f0a7102c3fffab592db0", "0059c09dca7de9bdbbc6be07"]}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x0, 0x24, 0x0, 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) removexattrat$auto(r3, &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000340)='/dev/kvm\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4018aee1, 0x0) rename$auto(0x0, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f00000002c0)={&(0x7f0000000040)=0x1, 0x10001, 0x0, &(0x7f0000000280)=0x2}) r5 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x401, 0x0) shutdown$auto(r5, 0x5) 328.699643ms ago: executing program 1 (id=3464): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x10, 0x2, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd70856962e1ab08acec6e9f396910fc3617701445250100000008000900", @ANYRES32=r4, @ANYBLOB="0800050006000000110001006f76735f12fffe12000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) prctl$auto_PR_SCHED_CORE_GET(0x200, 0x0, 0x0, 0x1ff, 0x401) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129a00, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) r6 = getpid() mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff) (async) sendmsg$auto_NLBL_MGMT_C_VERSION(r1, 0x0, 0x44005) (async) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0xa49, 0xe2, 0xeb1, 0x405, 0x7fffffff) write$auto(0x3, 0x0, 0xffd8) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r7 = ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x3) ioctl$auto_SNDCTL_DSP_SYNC(r7, 0x5001, &(0x7f00000000c0)="8e04e33f4bee5760fae444bfa0188f8573a4e18567133e0b33609e3e9f36fab431b0328ac1a8706b25ad6652e0c3") 298.486417ms ago: executing program 1 (id=3465): r0 = socket(0x1a, 0x1, 0x73) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000380)=ANY=[@ANYBLOB="7bd5c3208298138ccf04b17b8735075348e93156f3cd8364f89c66cbeccb123c9fb35142653ddbcc4addd49052288551b3239f41033f3b69539f77a2ac77ae894d86c0dffed0ba499128cf8f84015c691d2b68f22a27"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) (async) mmap$auto(0x4, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1f, 0x3, 0x13) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x28, 0x800, 0x3) (async, rerun: 32) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) (rerun: 32) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x6, 0x5, 0x8, 0x7fb, &(0x7f0000000080)}) (async) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) (async, rerun: 32) ustat$auto(0x801, 0x0) (rerun: 32) r3 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64) mmap$auto(0x9, 0x6, 0x80000002, 0xeb1, 0xffffffffffffffff, 0x1000008000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r3, @ANYBLOB="6a0cf11acb8197bb2a229d9ef3223206a647ca295bce0c66216499393e58ba7eb3bc26fc030d7b2b40e70eb839b8b6134b55bc30afaa5fedec0f19b429f1b6fd36bac4192a76c01b34f766ac6e98543b5addcc78adc141e703aecc93cbf42b14282376ef4b27005b332c588ef793c5e92c340df84e630b0a1dcb176598f676d30efbc2a8b95d567401bedfcc8544194c6113e2997956995e17d225e8b1cb8e12cf1e3931bf30ceb359b89ef989350a88452d8672abc09d56d10dafefeeb965c124e258fa78834e3eb0fdc1e6d2536cfc58f24bd7", @ANYBLOB="08fa6100987614ee"], 0x24}, 0x1, 0x0, 0x0, 0x480f1}, 0x20000000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf253a0000001e00ef00018000001c00e70042a6c50db28e83820cff0300003d668f0704006c00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x28040) (async) get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/protocols\x00', 0x80080, 0x0) (rerun: 64) read$auto(r4, &(0x7f0000000000)='/,\x00', 0x5644) 225.704735ms ago: executing program 1 (id=3466): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) pread64$auto(r0, 0x0, 0xf469, 0xbc3ab41) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = set_tid_address$auto(0x0) r3 = prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) read$auto_regulator_summary_fops_(r3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x1a00000000, 0x6, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x1, 0x10000, 0x80, 0xb, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x47f9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x7]}, 0x1fe, 0x200d) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) listen$auto(0xffffffffffffffff, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) 167.445383ms ago: executing program 3 (id=3467): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) (async, rerun: 32) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) (rerun: 32) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000080)={0x9, 0x5, 0x6, 0x883, 0x8, 0x1a1, 0x0, 0x101, 0x6, 0x0, 0x2, 0x20}) (async) writev$auto(r1, &(0x7f0000000040)={&(0x7f0000000080), 0x6}, 0x3) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x4831) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/lru_gen_full\x00', 0x30400, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x8040) (async) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f7420086", @ANYRES16=r4, @ANYBLOB="00012dbd7000fbdbdf2504000000050005000a000000050006000000000014000100ff0200000000000000000000000000018d02078022eca7c81b72b9d98ecaf5c25f95c2e1eef7e2a727779db8372bac335b8d7f091f147ac0dc2d2601df8051a3511167dc4e7505badee07da582827aad649503be6cc41644d33efb440fcaaa133ff731de604678c1690b65a27b5f5de6a37ba5d44759955a41ce848da2a654588533a62f0496a5aa157b721a5b67e94525662bcd8630e89f6d9df21d2ddc94d8f187378dcec341843da6144182dff38485e3b9c8b279cbc5c94dd412beacad76c7f9af16ecd320e8582fd6a5693ede92a097b0991738a1ec51adc071098d8d84e42d9700b7a6c0093bc5064ed9d99518f4b895b8801630a680834e86d604b1290093ef96bc3c649072f903703cf3005971ba59fe92d3388b9962a1d50241e1034947664bcb3137f596b080b0724efc2515a818d7cb453d7f0431513814de0990e43034153b60ba2a2146375b7d406a62001de81a7345f1e4b5da03c72e7a13c600006db5120eb53b2609a122b12afc64279558f78ac40d6f2294c0b4c51bc57f164aa4eac16dbbc651b298cab9acedac839311ceb962112a88583e0430887a7d41787bc081052f5cb110595b2459e512795f83c0905e66c6fead47a690ae93461255bc2bdf1faeac98c1ef49204c69f50f511c5cca32d8cbc2db4209d8312d50122505b3bfefdbcf86c31719f7c572a2b88853c70700ace722287b6fbb098318c0175701bf891a015439d744e9cb8162e66f179b1ff808a6f7c2ebc0c6a9144f9ceb8a031daf9d4dff0875b6e960ed68a04c7bb9ccab772c7db179d5d3cc2788400b2d2a487a0978115993e27ec46d6333d478500f69c148a91eeb7d8e340011800400ee800400508004003c0024008a002e2f6367726f75702f6367726f75702e737562747265655f636f6e74726f6c000c004b0000000000000000000000004600040026d4c1fd603b1256d21d8e644bb5f4bfe1a634d90b9a4606dc00d17d18d4b5fc1183645355db9c5794f335c8db0f6ab806a2f09803002aa7108f0919ccbeaf1823e00000050005002200000008000200ffffff7f"], 0x320}, 0x1, 0x0, 0x0, 0x44000}, 0x40800) socketpair$auto(0x1, 0x8, 0x0, &(0x7f0000000040)=0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (rerun: 32) 93.040131ms ago: executing program 1 (id=3468): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x10000000, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) lsm_set_self_attr$auto(0x1000030, 0x0, 0x3000, 0x10000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r4 = socket(0x15, 0x5, 0x0) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getsockopt$auto(r4, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) ioctl$auto_dma_heap_fops_dma_heap(r0, 0x10001, &(0x7f00000005c0)="e2591cf7159074b0a22a0a658cf8b18482af6372723e8ccb1dc6afd648f6fbff47def62ec5b95014f18277f2697346105c37a94c5709cb4f1ee4198821a2cf75235bf13a92a6cd6b8c3d07d46220a36c6fb7d13fcc4bcbbd723bf193af5b5bacb618a12a223ba32a6597a00d1c6a844e9bd0f3f0a74cb037b64c7b17368b3afb71f67cdaf16de01b51fd5d3e0f6b5e64652993db0efae82eb26e700900b242231b12961552b10f774d09430306869aaccc14be01ed9ee0bab110e794f51870e3dc690e40ef1527f26bbe94") r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x6, 0x100000) 73.136507ms ago: executing program 1 (id=3469): openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40482, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r2, 0x3, 0x0, 0x0) (async) timerfd_settime$auto(r2, 0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/limits\x00', 0x40, 0x0) (async) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/limits\x00', 0x40, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000080)=""/43, 0x2b) (async) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000080)=""/43, 0x2b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r4, 0x127a, 0x0) read$auto(0x3, 0x0, 0xfffffdef) (async) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 1 (id=3470): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x4800) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b41, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 98.765935][ T5841] cgroup: Unknown subsys name 'net' [ 98.985596][ T5841] cgroup: Unknown subsys name 'cpuset' [ 98.996395][ T5841] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.757238][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.293983][ T10] cfg80211: failed to load regulatory.db [ 103.069884][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.095183][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.104039][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.113053][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.129276][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.137518][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.169574][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.178008][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.188240][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.204912][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.207571][ T5170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.224447][ T5170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.233481][ T5170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.249584][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.257520][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.304267][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.318816][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.341324][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.350765][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.358932][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.816030][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 103.902401][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 104.010729][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 104.136149][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.144683][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.152253][ T5858] bridge_slave_0: entered allmulticast mode [ 104.160436][ T5858] bridge_slave_0: entered promiscuous mode [ 104.205118][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.212797][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.221288][ T5858] bridge_slave_1: entered allmulticast mode [ 104.229270][ T5858] bridge_slave_1: entered promiscuous mode [ 104.249980][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 104.282607][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.289921][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.297299][ T5861] bridge_slave_0: entered allmulticast mode [ 104.305439][ T5861] bridge_slave_0: entered promiscuous mode [ 104.340017][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.347296][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.354958][ T5861] bridge_slave_1: entered allmulticast mode [ 104.362664][ T5861] bridge_slave_1: entered promiscuous mode [ 104.404949][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.418610][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.496751][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.544886][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.560357][ T5858] team0: Port device team_slave_0 added [ 104.573752][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.580993][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.588174][ T5855] bridge_slave_0: entered allmulticast mode [ 104.596441][ T5855] bridge_slave_0: entered promiscuous mode [ 104.621961][ T5858] team0: Port device team_slave_1 added [ 104.647767][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.655252][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.662703][ T5855] bridge_slave_1: entered allmulticast mode [ 104.671171][ T5855] bridge_slave_1: entered promiscuous mode [ 104.697045][ T5861] team0: Port device team_slave_0 added [ 104.766544][ T5861] team0: Port device team_slave_1 added [ 104.791396][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.804723][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.812162][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.838338][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.853227][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.861783][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.889331][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.914328][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.922066][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.929980][ T5867] bridge_slave_0: entered allmulticast mode [ 104.937545][ T5867] bridge_slave_0: entered promiscuous mode [ 104.947885][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.979310][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.986573][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.993959][ T5867] bridge_slave_1: entered allmulticast mode [ 105.002081][ T5867] bridge_slave_1: entered promiscuous mode [ 105.055997][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.063066][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.089696][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.119673][ T5855] team0: Port device team_slave_0 added [ 105.130472][ T5855] team0: Port device team_slave_1 added [ 105.137139][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.144800][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.171102][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.192519][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.246536][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.254686][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.254769][ T5864] Bluetooth: hci1: command tx timeout [ 105.281118][ T5860] Bluetooth: hci0: command tx timeout [ 105.286629][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.306109][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.339198][ T5860] Bluetooth: hci2: command tx timeout [ 105.366286][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.373629][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.399609][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.420069][ T5860] Bluetooth: hci3: command tx timeout [ 105.433758][ T5858] hsr_slave_0: entered promiscuous mode [ 105.440899][ T5858] hsr_slave_1: entered promiscuous mode [ 105.471838][ T5867] team0: Port device team_slave_0 added [ 105.504041][ T5861] hsr_slave_0: entered promiscuous mode [ 105.511255][ T5861] hsr_slave_1: entered promiscuous mode [ 105.517395][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.525249][ T5861] Cannot create hsr debugfs directory [ 105.533859][ T5867] team0: Port device team_slave_1 added [ 105.601663][ T5855] hsr_slave_0: entered promiscuous mode [ 105.608245][ T5855] hsr_slave_1: entered promiscuous mode [ 105.614875][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.622585][ T5855] Cannot create hsr debugfs directory [ 105.676624][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.683679][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.709735][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.743535][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.750797][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.777035][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.926849][ T5867] hsr_slave_0: entered promiscuous mode [ 105.934268][ T5867] hsr_slave_1: entered promiscuous mode [ 105.941370][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.949462][ T5867] Cannot create hsr debugfs directory [ 106.314793][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.337980][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.349201][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.362083][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.440715][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.465718][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.488284][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.505183][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.600060][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.615268][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.645758][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.657088][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.751817][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.768332][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.789480][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.801909][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.894503][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.960251][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.987862][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.002054][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.009509][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.074057][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.081281][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.105804][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.131922][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.164079][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.180781][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.187931][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.209892][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.217151][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.256571][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.263817][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.291451][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.315249][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.322496][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.332549][ T5860] Bluetooth: hci1: command tx timeout [ 107.332577][ T5864] Bluetooth: hci0: command tx timeout [ 107.366278][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.409512][ T5864] Bluetooth: hci2: command tx timeout [ 107.447769][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.489929][ T5864] Bluetooth: hci3: command tx timeout [ 107.500454][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.507748][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.572620][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.579834][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.901865][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.038450][ T5858] veth0_vlan: entered promiscuous mode [ 108.103216][ T5858] veth1_vlan: entered promiscuous mode [ 108.239240][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.256515][ T5858] veth0_macvtap: entered promiscuous mode [ 108.275035][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.287128][ T5858] veth1_macvtap: entered promiscuous mode [ 108.327845][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.370988][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.403953][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.441744][ T5855] veth0_vlan: entered promiscuous mode [ 108.456119][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.465803][ T5858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.475665][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.484780][ T5858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.533045][ T5861] veth0_vlan: entered promiscuous mode [ 108.552729][ T5855] veth1_vlan: entered promiscuous mode [ 108.580914][ T5861] veth1_vlan: entered promiscuous mode [ 108.589740][ T5867] veth0_vlan: entered promiscuous mode [ 108.631601][ T5867] veth1_vlan: entered promiscuous mode [ 108.747034][ T5867] veth0_macvtap: entered promiscuous mode [ 108.756472][ T5861] veth0_macvtap: entered promiscuous mode [ 108.771570][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.787095][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.791881][ T5867] veth1_macvtap: entered promiscuous mode [ 108.808164][ T5861] veth1_macvtap: entered promiscuous mode [ 108.845374][ T5855] veth0_macvtap: entered promiscuous mode [ 108.857898][ T5855] veth1_macvtap: entered promiscuous mode [ 108.899518][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.906260][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.911005][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.932843][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.968094][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.982902][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.007120][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.042362][ T5867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.054179][ T5867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.064085][ T5867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.073247][ T5867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.085986][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.094260][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.116513][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.125711][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.136932][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.145956][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.164800][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185602][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.195023][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.220725][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.408904][ T5864] Bluetooth: hci0: command tx timeout [ 109.408913][ T5860] Bluetooth: hci1: command tx timeout [ 109.488810][ T5864] Bluetooth: hci2: command tx timeout [ 109.513188][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.537418][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.563875][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.571715][ T5864] Bluetooth: hci3: command tx timeout [ 109.591818][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.714911][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.739262][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.793545][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.807908][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.883249][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.928570][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.978591][ T5944] Invalid ELF header magic: != ELF [ 110.072575][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.133979][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.366666][ T5947] Zero length message leads to an empty skb [ 110.696691][ T5955] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.724109][ T5955] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 110.728747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.831147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.138254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.159353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.167747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.491930][ T5864] Bluetooth: hci1: command tx timeout [ 111.497392][ T5864] Bluetooth: hci0: command tx timeout [ 111.548562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!! [ 111.556995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!! [ 111.569123][ T5864] Bluetooth: hci2: command tx timeout [ 111.648825][ T5864] Bluetooth: hci3: command tx timeout [ 111.780016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.530747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 112.718702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.862267][ T5976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'. [ 113.753309][ T5986] netlink: 306 bytes leftover after parsing attributes in process `syz.3.10'. [ 114.340373][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.601139][ T5998] ======================================================= [ 114.601139][ T5998] WARNING: The mand mount option has been deprecated and [ 114.601139][ T5998] and is ignored by this kernel. Remove the mand [ 114.601139][ T5998] option from the mount to silence this warning. [ 114.601139][ T5998] ======================================================= [ 118.435460][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.815929][ T6032] process 'syz.3.19' launched './file0' with NULL argv: empty string added [ 119.018451][ T6032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 119.564029][ T6032] bond0: (slave bond_slave_1): Releasing backup interface [ 123.209069][ T6079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.169999][ T6101] netlink: 146 bytes leftover after parsing attributes in process `syz.2.28'. [ 126.963990][ T6136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 127.268041][ T6138] hub 8-0:1.0: USB hub found [ 127.310084][ T6138] hub 8-0:1.0: 1 port detected [ 127.314522][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 131.455613][ T6180] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 132.172303][ T6184] netlink: 146 bytes leftover after parsing attributes in process `syz.1.40'. [ 135.103559][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 135.155874][ T6233] netlink: 13 bytes leftover after parsing attributes in process `syz.0.49'. [ 137.636315][ T6255] nvme_fabrics: missing parameter 'transport=%s' [ 137.643129][ T6255] nvme_fabrics: missing parameter 'nqn=%s' [ 138.313952][ T6280] FAULT_INJECTION: forcing a failure. [ 138.313952][ T6280] name failslab, interval 1, probability 0, space 0, times 1 [ 138.326883][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.1.56 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 138.326915][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.326930][ T6280] Call Trace: [ 138.326937][ T6280] [ 138.326948][ T6280] dump_stack_lvl+0x16c/0x1f0 [ 138.326990][ T6280] should_fail_ex+0x512/0x640 [ 138.327026][ T6280] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 138.327066][ T6280] should_failslab+0xc2/0x120 [ 138.327088][ T6280] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 138.327126][ T6280] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 138.327163][ T6280] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 138.327199][ T6280] radix_tree_insert+0x247/0x630 [ 138.327237][ T6280] qrtr_node_enqueue+0x1077/0x12e0 [ 138.327265][ T6280] ? __asan_memcpy+0x3c/0x60 [ 138.327299][ T6280] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 138.327320][ T6280] ? skb_set_owner_w+0x31f/0x710 [ 138.327352][ T6280] ? skb_copy_header+0x20/0x2b0 [ 138.327383][ T6280] ? __pfx_skb_set_owner_w+0x10/0x10 [ 138.327413][ T6280] ? __pskb_copy_fclone+0x48e/0xb50 [ 138.327441][ T6280] ? __pfx__copy_from_iter+0x10/0x10 [ 138.327485][ T6280] qrtr_bcast_enqueue+0xc7/0x1b0 [ 138.327514][ T6280] qrtr_sendmsg+0x444/0x7b0 [ 138.327538][ T6280] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 138.327561][ T6280] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 138.327597][ T6280] sock_write_iter+0x4ff/0x5b0 [ 138.327624][ T6280] ? __pfx_sock_write_iter+0x10/0x10 [ 138.327662][ T6280] ? __futex_wait+0x24c/0x2f0 [ 138.327698][ T6280] ? copy_iovec_from_user+0x131/0x170 [ 138.327738][ T6280] do_iter_readv_writev+0x654/0x950 [ 138.327773][ T6280] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 138.327811][ T6280] ? bpf_lsm_file_permission+0x9/0x10 [ 138.327837][ T6280] ? security_file_permission+0x71/0x210 [ 138.327869][ T6280] ? rw_verify_area+0xcf/0x680 [ 138.327902][ T6280] vfs_writev+0x35f/0xde0 [ 138.327942][ T6280] ? __pfx_vfs_writev+0x10/0x10 [ 138.327996][ T6280] ? __fget_files+0x20e/0x3c0 [ 138.328037][ T6280] ? do_writev+0x28c/0x340 [ 138.328066][ T6280] do_writev+0x28c/0x340 [ 138.328098][ T6280] ? __pfx_do_writev+0x10/0x10 [ 138.328138][ T6280] do_syscall_64+0xcd/0x490 [ 138.328177][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.328201][ T6280] RIP: 0033:0x7f222458e929 [ 138.328220][ T6280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.328248][ T6280] RSP: 002b:00007f22253c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 138.328270][ T6280] RAX: ffffffffffffffda RBX: 00007f22247b5fa0 RCX: 00007f222458e929 [ 138.328286][ T6280] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 138.328301][ T6280] RBP: 00007f2224610b39 R08: 0000000000000000 R09: 0000000000000000 [ 138.328315][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.328328][ T6280] R13: 0000000000000000 R14: 00007f22247b5fa0 R15: 00007ffe8bb7cd18 [ 138.328370][ T6280] [ 140.243849][ T6301] FAULT_INJECTION: forcing a failure. [ 140.243849][ T6301] name failslab, interval 1, probability 0, space 0, times 0 [ 140.260236][ T6301] CPU: 1 UID: 0 PID: 6301 Comm: syz.2.60 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 140.260270][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.260284][ T6301] Call Trace: [ 140.260291][ T6301] [ 140.260300][ T6301] dump_stack_lvl+0x16c/0x1f0 [ 140.260341][ T6301] should_fail_ex+0x512/0x640 [ 140.260378][ T6301] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 140.260414][ T6301] should_failslab+0xc2/0x120 [ 140.260436][ T6301] __kmalloc_cache_noprof+0x6a/0x3e0 [ 140.260469][ T6301] ? blk_mq_init_allocated_queue+0xd1/0x1240 [ 140.260510][ T6301] blk_mq_init_allocated_queue+0xd1/0x1240 [ 140.260549][ T6301] ? blk_alloc_queue+0x630/0x760 [ 140.260575][ T6301] ? blk_mq_alloc_queue+0x175/0x290 [ 140.260606][ T6301] ? blk_alloc_queue+0x1a3/0x760 [ 140.260636][ T6301] blk_mq_alloc_queue+0x1be/0x290 [ 140.260670][ T6301] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 140.260718][ T6301] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.260757][ T6301] ? idr_alloc+0xdd/0x130 [ 140.260787][ T6301] ? __pfx_idr_alloc+0x10/0x10 [ 140.260824][ T6301] __blk_mq_alloc_disk+0x29/0x120 [ 140.260859][ T6301] nbd_dev_add+0x4a0/0xbc0 [ 140.260896][ T6301] ? __pfx_nbd_dev_add+0x10/0x10 [ 140.260949][ T6301] ? bpf_lsm_capable+0x9/0x10 [ 140.260980][ T6301] ? __radix_tree_lookup+0x21f/0x2c0 [ 140.261017][ T6301] nbd_genl_connect+0x8b0/0x1c20 [ 140.261061][ T6301] ? __pfx_nbd_genl_connect+0x10/0x10 [ 140.261108][ T6301] ? __nla_parse+0x40/0x60 [ 140.261136][ T6301] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 140.261168][ T6301] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 140.261205][ T6301] genl_family_rcv_msg_doit+0x206/0x2f0 [ 140.261236][ T6301] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.261266][ T6301] ? genl_get_cmd+0x194/0x580 [ 140.261301][ T6301] ? __radix_tree_lookup+0x21f/0x2c0 [ 140.261337][ T6301] genl_rcv_msg+0x55c/0x800 [ 140.261371][ T6301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.261400][ T6301] ? __pfx_nbd_genl_connect+0x10/0x10 [ 140.261449][ T6301] netlink_rcv_skb+0x155/0x420 [ 140.261473][ T6301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.261503][ T6301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.261540][ T6301] ? netlink_deliver_tap+0x1ae/0xd30 [ 140.261583][ T6301] genl_rcv+0x28/0x40 [ 140.261607][ T6301] netlink_unicast+0x58d/0x850 [ 140.261635][ T6301] ? __pfx_netlink_unicast+0x10/0x10 [ 140.261668][ T6301] netlink_sendmsg+0x8d1/0xdd0 [ 140.261696][ T6301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.261732][ T6301] ____sys_sendmsg+0xa95/0xc70 [ 140.261759][ T6301] ? copy_msghdr_from_user+0x10a/0x160 [ 140.261794][ T6301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.261826][ T6301] ? try_to_wake_up+0xa2f/0x1680 [ 140.261855][ T6301] ___sys_sendmsg+0x134/0x1d0 [ 140.261892][ T6301] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.261925][ T6301] ? __lock_acquire+0x622/0x1c90 [ 140.261994][ T6301] __sys_sendmsg+0x16d/0x220 [ 140.262029][ T6301] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.262064][ T6301] ? __x64_sys_futex+0x1e0/0x4c0 [ 140.262118][ T6301] do_syscall_64+0xcd/0x490 [ 140.262168][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.262200][ T6301] RIP: 0033:0x7fd1bc98e929 [ 140.262226][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.262255][ T6301] RSP: 002b:00007fd1bd78f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.262282][ T6301] RAX: ffffffffffffffda RBX: 00007fd1bcbb6080 RCX: 00007fd1bc98e929 [ 140.262302][ T6301] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000006 [ 140.262319][ T6301] RBP: 00007fd1bca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 140.262338][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.262355][ T6301] R13: 0000000000000000 R14: 00007fd1bcbb6080 R15: 00007fffa1acfa98 [ 140.262393][ T6301] [ 140.698887][ T6301] nbd: failed to add new device [ 141.159584][ T6303] random: crng reseeded on system resumption [ 141.587630][ T6311] netlink: 'syz.1.63': attribute type 11 has an invalid length. [ 141.667431][ T6317] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 143.257798][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.264549][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.864843][ T6391] netlink: 86 bytes leftover after parsing attributes in process `syz.1.79'. [ 146.581714][ T6410] FAULT_INJECTION: forcing a failure. [ 146.581714][ T6410] name fail_futex, interval 1, probability 0, space 0, times 1 [ 146.633323][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: syz.3.83 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 146.633368][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.633386][ T6410] Call Trace: [ 146.633401][ T6410] [ 146.633411][ T6410] dump_stack_lvl+0x16c/0x1f0 [ 146.633450][ T6410] should_fail_ex+0x512/0x640 [ 146.633489][ T6410] get_futex_key+0xf36/0x1540 [ 146.633520][ T6410] ? __pfx_get_futex_key+0x10/0x10 [ 146.633548][ T6410] ? __mutex_trylock_common+0xe9/0x250 [ 146.633589][ T6410] futex_wake+0xe7/0x4e0 [ 146.633625][ T6410] ? __pfx_futex_wake+0x10/0x10 [ 146.633655][ T6410] ? __lock_acquire+0xb8a/0x1c90 [ 146.633700][ T6410] do_futex+0x1e3/0x350 [ 146.633728][ T6410] ? __pfx_do_futex+0x10/0x10 [ 146.633754][ T6410] ? __might_fault+0xe3/0x190 [ 146.633796][ T6410] mm_release+0x24e/0x300 [ 146.633824][ T6410] do_exit+0x68b/0x2bd0 [ 146.633862][ T6410] ? __pfx_do_exit+0x10/0x10 [ 146.633895][ T6410] ? do_raw_spin_lock+0x12c/0x2b0 [ 146.633931][ T6410] ? find_held_lock+0x2b/0x80 [ 146.633959][ T6410] do_group_exit+0xd3/0x2a0 [ 146.633994][ T6410] get_signal+0x2673/0x26d0 [ 146.634031][ T6410] ? __pfx_get_signal+0x10/0x10 [ 146.634057][ T6410] ? do_futex+0x122/0x350 [ 146.634085][ T6410] ? __pfx_do_futex+0x10/0x10 [ 146.634115][ T6410] arch_do_signal_or_restart+0x8f/0x790 [ 146.634152][ T6410] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 146.634188][ T6410] ? xfd_validate_state+0x61/0x180 [ 146.634219][ T6410] ? __pfx_ksys_write+0x10/0x10 [ 146.634258][ T6410] exit_to_user_mode_loop+0x84/0x110 [ 146.634297][ T6410] do_syscall_64+0x3f6/0x490 [ 146.634335][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.634358][ T6410] RIP: 0033:0x7f8e3e38e929 [ 146.634376][ T6410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.634398][ T6410] RSP: 002b:00007f8e3c1d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.634419][ T6410] RAX: fffffffffffffe00 RBX: 00007f8e3e5b6088 RCX: 00007f8e3e38e929 [ 146.634435][ T6410] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8e3e5b6088 [ 146.634449][ T6410] RBP: 00007f8e3e5b6080 R08: 0000000000000000 R09: 0000000000000000 [ 146.634462][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e3e5b608c [ 146.634476][ T6410] R13: 0000000000000000 R14: 00007fff69f57d60 R15: 00007fff69f57e48 [ 146.634529][ T6410] [ 148.048928][ T6423] mmap: syz.0.85 (6423) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.048493][ T6451] capability: warning: `syz.1.91' uses 32-bit capabilities (legacy support in use) [ 150.390953][ T6461] ima: policy update failed [ 150.402444][ T30] audit: type=1802 audit(6047221892.750:2): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.93" res=0 errno=0 [ 150.878719][ T30] audit: type=1800 audit(6047221893.210:3): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.95" name="lu_gp_id" dev="configfs" ino=8810 res=0 errno=0 [ 151.690153][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 151.711091][ T6491] vhci_hcd: invalid port number 16 [ 151.716291][ T6491] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 152.326442][ T6499] vhci_hcd: invalid port number 16 [ 152.353029][ T6499] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 153.089459][ T6508] Invalid ELF header magic: != ELF [ 161.106553][ T6629] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 161.915970][ T6636] random: crng reseeded on system resumption [ 162.155870][ T6643] netlink: 354 bytes leftover after parsing attributes in process `syz.2.133'. [ 162.416939][ T6634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 163.626817][ T6653] vhci_hcd: invalid port number 16 [ 163.651249][ T6653] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 165.988562][ T6690] device-mapper: ioctl: name not supplied when creating device [ 166.891105][ T6707] can: request_module (can-proto-4) failed. [ 168.426769][ T6742] netlink: 342 bytes leftover after parsing attributes in process `syz.2.152'. [ 168.912168][ T6751] netlink: zone id is out of range [ 168.917407][ T6751] netlink: zone id is out of range [ 168.947995][ T6748] netlink: zone id is out of range [ 168.959310][ T6748] netlink: zone id is out of range [ 168.975170][ T6751] netlink: zone id is out of range [ 169.005218][ T6748] netlink: zone id is out of range [ 169.020932][ T6754] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 169.053260][ T6751] netlink: zone id is out of range [ 169.063082][ T6751] netlink: zone id is out of range [ 169.068269][ T6751] netlink: zone id is out of range [ 169.072653][ T6748] netlink: zone id is out of range [ 171.946609][ T6818] QAT: failed to copy from user. [ 174.453174][ T6873] FAULT_INJECTION: forcing a failure. [ 174.453174][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 174.481069][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.0.177 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 174.481115][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.481133][ T6873] Call Trace: [ 174.481143][ T6873] [ 174.481154][ T6873] dump_stack_lvl+0x16c/0x1f0 [ 174.481214][ T6873] should_fail_ex+0x512/0x640 [ 174.481261][ T6873] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 174.481314][ T6873] should_failslab+0xc2/0x120 [ 174.481357][ T6873] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 174.481404][ T6873] ? __alloc_skb+0x2b2/0x380 [ 174.481456][ T6873] __alloc_skb+0x2b2/0x380 [ 174.481500][ T6873] ? __pfx___alloc_skb+0x10/0x10 [ 174.481550][ T6873] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 174.481591][ T6873] netlink_alloc_large_skb+0x69/0x130 [ 174.481647][ T6873] netlink_sendmsg+0x6a1/0xdd0 [ 174.481688][ T6873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.481740][ T6873] ____sys_sendmsg+0xa95/0xc70 [ 174.481778][ T6873] ? copy_msghdr_from_user+0x10a/0x160 [ 174.481828][ T6873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.481870][ T6873] ? __pfx__kstrtoull+0x10/0x10 [ 174.481918][ T6873] ___sys_sendmsg+0x134/0x1d0 [ 174.481969][ T6873] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.482038][ T6873] ? find_held_lock+0x2b/0x80 [ 174.482101][ T6873] __sys_sendmmsg+0x200/0x420 [ 174.482156][ T6873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 174.482227][ T6873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.482297][ T6873] ? fput+0x70/0xf0 [ 174.482329][ T6873] ? ksys_write+0x1ac/0x250 [ 174.482376][ T6873] ? __pfx_ksys_write+0x10/0x10 [ 174.482432][ T6873] __x64_sys_sendmmsg+0x9c/0x100 [ 174.482481][ T6873] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.482529][ T6873] do_syscall_64+0xcd/0x490 [ 174.482582][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.482615][ T6873] RIP: 0033:0x7f27c318e929 [ 174.482641][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.482672][ T6873] RSP: 002b:00007f27c3f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.482701][ T6873] RAX: ffffffffffffffda RBX: 00007f27c33b5fa0 RCX: 00007f27c318e929 [ 174.482722][ T6873] RDX: 0000000000000015 RSI: 0000200000000080 RDI: 0000000000000003 [ 174.482740][ T6873] RBP: 00007f27c3f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 174.482759][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.482777][ T6873] R13: 0000000000000000 R14: 00007f27c33b5fa0 R15: 00007ffe13fb3d48 [ 174.482819][ T6873] [ 174.781386][ T6876] netlink: 146 bytes leftover after parsing attributes in process `syz.2.178'. [ 175.082935][ T6891] nvme_fcloop: unknown parameter or missing value '7' [ 175.124913][ T6891] nvme_fcloop: unknown parameter or missing value '7' [ 175.178852][ T6897] random: crng reseeded on system resumption [ 177.992003][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 178.652289][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 179.009245][ T6951] Invalid ELF header magic: != ELF [ 180.059772][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 180.870624][ T6995] program syz.1.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.348083][ T7018] netlink: 330 bytes leftover after parsing attributes in process `syz.3.206'. [ 183.374445][ T7041] netlink: 330 bytes leftover after parsing attributes in process `syz.0.215'. [ 184.242388][ T7022] kexec: Could not allocate control_code_buffer [ 185.047710][ T7073] HfR: entered promiscuous mode [ 185.129619][ T7073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.224'. [ 185.426505][ T7079] net_ratelimit: 204 callbacks suppressed [ 185.426534][ T7079] openvswitch: netlink: IPv4 tunnel dst address is zero [ 185.586913][ T7094] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 204.693246][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.700207][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.251298][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 227.257865][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 227.268595][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 227.274695][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 239.038542][ T5170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.065061][ T5170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.075945][ T5170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.085291][ T5170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.099307][ T5170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.267558][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.482970][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.691373][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.897229][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.542747][ T36] bridge_slave_1: left allmulticast mode [ 240.549089][ T36] bridge_slave_1: left promiscuous mode [ 240.556308][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.633051][ T36] bridge_slave_0: left allmulticast mode [ 240.651474][ T36] bridge_slave_0: left promiscuous mode [ 240.657346][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.172691][ T5864] Bluetooth: hci1: command tx timeout [ 242.347306][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.456542][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.524780][ T36] bond0 (unregistering): Released all slaves [ 242.736402][ T9955] chnl_net:caif_netlink_parms(): no params data found [ 243.252398][ T5864] Bluetooth: hci1: command tx timeout [ 244.083707][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.121240][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.163725][ T9955] bridge_slave_0: entered allmulticast mode [ 244.200628][ T9955] bridge_slave_0: entered promiscuous mode [ 244.461239][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.508615][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.516031][ T9955] bridge_slave_1: entered allmulticast mode [ 244.570476][ T9955] bridge_slave_1: entered promiscuous mode [ 244.877397][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.028714][ T36] hsr_slave_0: left promiscuous mode [ 245.073121][ T36] hsr_slave_1: left promiscuous mode [ 245.086215][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.116111][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.152729][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.199438][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.305832][ T36] veth1_macvtap: left promiscuous mode [ 245.329095][ T5864] Bluetooth: hci1: command tx timeout [ 245.348754][ T36] veth0_macvtap: left promiscuous mode [ 245.361828][ T36] veth1_vlan: left promiscuous mode [ 245.370422][ T36] veth0_vlan: left promiscuous mode [ 247.409194][ T5864] Bluetooth: hci1: command tx timeout [ 247.572892][ T36] team0 (unregistering): Port device team_slave_1 removed [ 247.782520][ T36] team0 (unregistering): Port device team_slave_0 removed [ 250.087284][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.387152][ T9955] team0: Port device team_slave_0 added [ 250.436404][ T9955] team0: Port device team_slave_1 added [ 250.671565][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.682185][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.745046][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.785283][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.852824][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.943092][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.233521][ T9955] hsr_slave_0: entered promiscuous mode [ 251.263812][ T9955] hsr_slave_1: entered promiscuous mode [ 252.993083][ T9955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.043878][ T9955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.077897][ T9955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.152689][ T9955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.556210][ T9955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.677622][ T9955] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.742185][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.749489][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.801404][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.808670][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.081633][ T9955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.296705][ T9955] veth0_vlan: entered promiscuous mode [ 255.482425][ T9955] veth1_vlan: entered promiscuous mode [ 255.696014][ T9955] veth0_macvtap: entered promiscuous mode [ 255.766101][ T9955] veth1_macvtap: entered promiscuous mode [ 255.875634][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.931180][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.006820][ T9955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.063115][ T9955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.084893][ T9955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.108554][ T9955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.491663][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.559558][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.677810][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.713469][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.329792][T10731] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 258.133760][T10732] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 258.492882][ T5170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.513789][ T5170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.524843][ T5170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.543177][ T5170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.557061][ T5170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.153946][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.525524][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.846726][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.299762][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.333058][T10825] FAULT_INJECTION: forcing a failure. [ 260.333058][T10825] name failslab, interval 1, probability 0, space 0, times 0 [ 260.346985][T10825] CPU: 0 UID: 0 PID: 10825 Comm: syz.2.2954 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 260.347031][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.347051][T10825] Call Trace: [ 260.347062][T10825] [ 260.347074][T10825] dump_stack_lvl+0x16c/0x1f0 [ 260.347134][T10825] should_fail_ex+0x512/0x640 [ 260.347184][T10825] ? fs_reclaim_acquire+0xae/0x150 [ 260.347227][T10825] ? tomoyo_encode2+0x100/0x3e0 [ 260.347272][T10825] should_failslab+0xc2/0x120 [ 260.347305][T10825] __kmalloc_noprof+0xd2/0x510 [ 260.347355][T10825] ? d_absolute_path+0x136/0x1a0 [ 260.347398][T10825] tomoyo_encode2+0x100/0x3e0 [ 260.347463][T10825] tomoyo_encode+0x29/0x50 [ 260.347510][T10825] tomoyo_realpath_from_path+0x18f/0x6e0 [ 260.347573][T10825] tomoyo_mkdev_perm+0x22b/0x570 [ 260.347612][T10825] ? tomoyo_mkdev_perm+0x217/0x570 [ 260.347655][T10825] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 260.347711][T10825] ? find_held_lock+0x2b/0x80 [ 260.347773][T10825] ? __pfx_current_check_access_path+0x10/0x10 [ 260.347833][T10825] tomoyo_path_mknod+0x12a/0x190 [ 260.347888][T10825] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 260.347947][T10825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.348008][T10825] security_path_mknod+0x161/0x310 [ 260.348054][T10825] do_mknodat+0x239/0x5d0 [ 260.348109][T10825] ? __pfx_do_mknodat+0x10/0x10 [ 260.348155][T10825] ? getname_flags.part.0+0x1c5/0x550 [ 260.348205][T10825] __x64_sys_mknod+0x87/0xb0 [ 260.348257][T10825] do_syscall_64+0xcd/0x490 [ 260.348320][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.348353][T10825] RIP: 0033:0x7f124a38e929 [ 260.348381][T10825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.348420][T10825] RSP: 002b:00007f124b239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 260.348460][T10825] RAX: ffffffffffffffda RBX: 00007f124a5b6080 RCX: 00007f124a38e929 [ 260.348482][T10825] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 260.348503][T10825] RBP: 00007f124a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 260.348523][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.348543][T10825] R13: 0000000000000000 R14: 00007f124a5b6080 R15: 00007fffb5ef9f08 [ 260.348588][T10825] [ 260.620998][T10825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.692009][ T5864] Bluetooth: hci3: command tx timeout [ 261.423666][T10756] chnl_net:caif_netlink_parms(): no params data found [ 261.867871][ T1102] bridge_slave_1: left allmulticast mode [ 261.908835][ T1102] bridge_slave_1: left promiscuous mode [ 261.925937][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.984275][ T1102] bridge_slave_0: left allmulticast mode [ 261.999009][ T1102] bridge_slave_0: left promiscuous mode [ 262.011865][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.771710][ T5864] Bluetooth: hci3: command tx timeout [ 263.497518][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.521414][ T1102] bond0 (unregistering): Released all slaves [ 264.108017][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.138633][T10756] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.168624][T10756] bridge_slave_0: entered allmulticast mode [ 264.180672][T10756] bridge_slave_0: entered promiscuous mode [ 264.276181][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.320135][T10756] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.402729][T10756] bridge_slave_1: entered allmulticast mode [ 264.420715][T10756] bridge_slave_1: entered promiscuous mode [ 264.848767][ T5864] Bluetooth: hci3: command tx timeout [ 265.245705][T10756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.320187][T10756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.439544][ T1102] hsr_slave_0: left promiscuous mode [ 265.460495][ T1102] hsr_slave_1: left promiscuous mode [ 265.484113][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.521899][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.564809][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.598628][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.797303][ T1102] veth1_macvtap: left promiscuous mode [ 265.814104][ T1102] veth0_macvtap: left promiscuous mode [ 265.828677][ T1102] veth1_vlan: left promiscuous mode [ 265.842001][ T1102] veth0_vlan: left promiscuous mode [ 265.946035][T11013] ima: policy update failed [ 265.996838][ T30] audit: type=1802 audit(6047222016.340:4): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3061" res=0 errno=0 [ 266.140277][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.150527][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.935215][ T5864] Bluetooth: hci3: command tx timeout [ 268.400228][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 268.590682][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 270.256349][T10756] team0: Port device team_slave_0 added [ 270.315293][T10756] team0: Port device team_slave_1 added [ 270.648688][T10756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.655712][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.721332][T10756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.826981][T10756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.868753][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.968443][T10756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.210886][T10756] hsr_slave_0: entered promiscuous mode [ 271.217698][T10756] hsr_slave_1: entered promiscuous mode [ 271.237438][T10756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.246618][T10756] Cannot create hsr debugfs directory [ 273.550397][T10756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.598984][T10756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.656370][T10756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.713820][T10756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.007427][T11303] sp0: Synchronizing with TNC [ 274.267130][T10756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.375716][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.456594][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.463881][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.533461][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.540725][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.308055][T11358] FAULT_INJECTION: forcing a failure. [ 275.308055][T11358] name failslab, interval 1, probability 0, space 0, times 0 [ 275.408946][T11358] CPU: 0 UID: 0 PID: 11358 Comm: syz.2.3271 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 275.408991][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.409011][T11358] Call Trace: [ 275.409020][T11358] [ 275.409031][T11358] dump_stack_lvl+0x16c/0x1f0 [ 275.409083][T11358] should_fail_ex+0x512/0x640 [ 275.409130][T11358] ? fs_reclaim_acquire+0xae/0x150 [ 275.409172][T11358] should_failslab+0xc2/0x120 [ 275.409203][T11358] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 275.409254][T11358] ? security_inode_alloc+0x3b/0x2b0 [ 275.409297][T11358] security_inode_alloc+0x3b/0x2b0 [ 275.409334][T11358] inode_init_always_gfp+0xce4/0x1030 [ 275.409388][T11358] alloc_inode+0x86/0x240 [ 275.409422][T11358] sock_alloc+0x40/0x280 [ 275.409453][T11358] __sock_create+0xc1/0x8d0 [ 275.409499][T11358] __sys_socket+0x14d/0x260 [ 275.409537][T11358] ? __pfx___sys_socket+0x10/0x10 [ 275.409575][T11358] ? xfd_validate_state+0x61/0x180 [ 275.409617][T11358] ? __pfx___do_sys_close_range+0x10/0x10 [ 275.409674][T11358] __x64_sys_socket+0x72/0xb0 [ 275.409709][T11358] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.409755][T11358] do_syscall_64+0xcd/0x490 [ 275.409807][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.409838][T11358] RIP: 0033:0x7f124a38e929 [ 275.409863][T11358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.409900][T11358] RSP: 002b:00007f124b25a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 275.409929][T11358] RAX: ffffffffffffffda RBX: 00007f124a5b5fa0 RCX: 00007f124a38e929 [ 275.409948][T11358] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 275.409965][T11358] RBP: 00007f124a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.409984][T11358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.410002][T11358] R13: 0000000000000000 R14: 00007f124a5b5fa0 R15: 00007fffb5ef9f08 [ 275.410042][T11358] [ 275.410079][T11358] socket: no more sockets [ 275.846156][T10756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.073326][T10756] veth0_vlan: entered promiscuous mode [ 276.144850][T10756] veth1_vlan: entered promiscuous mode [ 276.413480][T10756] veth0_macvtap: entered promiscuous mode [ 276.496191][T10756] veth1_macvtap: entered promiscuous mode [ 276.565224][T10756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.624279][T10756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.893577][T10756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.940269][T10756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.967584][T10756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.027108][T10756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.571538][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.601908][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.760547][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.792158][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.943423][T11450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.970185][T11450] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.016308][T11450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.040714][T11450] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 279.090607][T11450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.096726][T11450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.124493][T11450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.133262][T11450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.139886][T11450] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 279.159535][T11450] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 279.208868][ T5170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.222873][ T5170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.233064][ T5170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.244328][ T5170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.258282][ T5170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.537648][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.741026][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.976684][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.676717][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.088480][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 281.170202][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.170226][ T5170] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.250835][ T49] bridge_slave_1: left allmulticast mode [ 281.256661][ T49] bridge_slave_1: left promiscuous mode [ 281.312187][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.343620][ T5170] Bluetooth: hci4: command tx timeout [ 281.383319][ T49] bridge_slave_0: left allmulticast mode [ 281.389162][ T49] bridge_slave_0: left promiscuous mode [ 281.395937][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.168501][ T5170] Bluetooth: hci2: command 0x0406 tx timeout [ 283.249407][ T5170] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.258418][ T5170] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.386366][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.418932][ T5170] Bluetooth: hci4: command tx timeout [ 283.464091][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.511068][ T49] bond0 (unregistering): Released all slaves [ 283.726858][ T49] HfR: left promiscuous mode [ 283.790820][T11470] chnl_net:caif_netlink_parms(): no params data found [ 284.791980][T11634] random: crng reseeded on system resumption [ 285.002477][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.036681][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.054712][T11470] bridge_slave_0: entered allmulticast mode [ 285.075812][T11470] bridge_slave_0: entered promiscuous mode [ 285.140578][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.147831][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.179274][T11470] bridge_slave_1: entered allmulticast mode [ 285.187735][T11470] bridge_slave_1: entered promiscuous mode [ 285.332091][ T5170] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.332124][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.392909][ T49] hsr_slave_0: left promiscuous mode [ 285.418466][ T49] hsr_slave_1: left promiscuous mode [ 285.437408][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.467296][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.488504][ T5864] Bluetooth: hci4: command tx timeout [ 285.494989][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.508581][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.509570][T11661] FAULT_INJECTION: forcing a failure. [ 285.509570][T11661] name failslab, interval 1, probability 0, space 0, times 0 [ 285.544481][T11661] CPU: 0 UID: 0 PID: 11661 Comm: syz.2.3411 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 285.544535][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.544554][T11661] Call Trace: [ 285.544565][T11661] [ 285.544578][T11661] dump_stack_lvl+0x16c/0x1f0 [ 285.544636][T11661] should_fail_ex+0x512/0x640 [ 285.544686][T11661] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 285.544743][T11661] should_failslab+0xc2/0x120 [ 285.544776][T11661] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 285.544826][T11661] ? mas_alloc_nodes+0x18b/0x8b0 [ 285.544878][T11661] mas_alloc_nodes+0x18b/0x8b0 [ 285.544931][T11661] mas_node_count_gfp+0x105/0x130 [ 285.544980][T11661] mas_preallocate+0x7e0/0xde0 [ 285.545023][T11661] ? __pfx_mas_preallocate+0x10/0x10 [ 285.545072][T11661] ? __pfx_mt_find+0x10/0x10 [ 285.545109][T11661] vma_link+0x135/0x6a0 [ 285.545165][T11661] ? __pfx_vma_link+0x10/0x10 [ 285.545243][T11661] insert_vm_struct+0xf4/0x2d0 [ 285.545302][T11661] create_init_stack_vma+0x2da/0x700 [ 285.545365][T11661] alloc_bprm+0x420/0x6f0 [ 285.545416][T11661] do_execveat_common.isra.0+0x1ce/0x610 [ 285.545474][T11661] __x64_sys_execve+0x8e/0xb0 [ 285.545540][T11661] do_syscall_64+0xcd/0x490 [ 285.545597][T11661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.545631][T11661] RIP: 0033:0x7f124a38e929 [ 285.545659][T11661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.545692][T11661] RSP: 002b:00007f124b239038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 285.545735][T11661] RAX: ffffffffffffffda RBX: 00007f124a5b6080 RCX: 00007f124a38e929 [ 285.545755][T11661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 285.545783][T11661] RBP: 00007f124a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 285.545809][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.545828][T11661] R13: 0000000000000000 R14: 00007f124a5b6080 R15: 00007fffb5ef9f08 [ 285.545872][T11661] [ 285.756446][ T49] veth1_macvtap: left promiscuous mode [ 285.764131][T11663] nfs4: Unknown parameter 'nfsd' [ 285.769252][ T49] veth0_macvtap: left promiscuous mode [ 285.775064][ T49] veth1_vlan: left promiscuous mode [ 285.789945][T11663] binder: 11662:11663 unknown command 4 [ 285.796377][ T49] veth0_vlan: left promiscuous mode [ 285.805050][T11663] binder: 11662:11663 ioctl c0306201 0 returned -22 [ 286.603910][ T49] team0 (unregistering): Port device team_slave_1 removed [ 286.690408][ T49] team0 (unregistering): Port device team_slave_0 removed [ 287.569376][ T5864] Bluetooth: hci4: command tx timeout [ 287.574842][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.757623][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.939310][T11470] team0: Port device team_slave_0 added [ 288.001040][T11470] team0: Port device team_slave_1 added [ 288.206632][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.214778][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.244883][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.266123][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.276604][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.309651][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.562550][T11470] hsr_slave_0: entered promiscuous mode [ 288.587834][T11470] hsr_slave_1: entered promiscuous mode [ 288.622274][T11470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.642398][T11470] Cannot create hsr debugfs directory [ 288.669086][T11746] ================================================================== [ 288.677230][T11746] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 288.685967][T11746] Read of size 1 at addr ffff8881453a3907 by task syz.3.3467/11746 [ 288.693914][T11746] [ 288.696281][T11746] CPU: 0 UID: 0 PID: 11746 Comm: syz.3.3467 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 288.696322][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.696341][T11746] Call Trace: [ 288.696350][T11746] [ 288.696360][T11746] dump_stack_lvl+0x116/0x1f0 [ 288.696411][T11746] print_report+0xcd/0x680 [ 288.696441][T11746] ? __virt_addr_valid+0x81/0x610 [ 288.696476][T11746] ? __phys_addr+0xe8/0x180 [ 288.696512][T11746] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 288.696548][T11746] kasan_report+0xe0/0x110 [ 288.696579][T11746] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 288.696620][T11746] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 288.696655][T11746] ? __lock_acquire+0xb8a/0x1c90 [ 288.696705][T11746] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 288.696744][T11746] ? find_held_lock+0x2b/0x80 [ 288.696777][T11746] ? __might_fault+0xe3/0x190 [ 288.696824][T11746] ? __might_fault+0xe3/0x190 [ 288.696869][T11746] ? __might_fault+0x13b/0x190 [ 288.696928][T11746] ? proc_simple_write+0x117/0x1b0 [ 288.696960][T11746] proc_simple_write+0x117/0x1b0 [ 288.696992][T11746] ? __pfx_proc_simple_write+0x10/0x10 [ 288.697026][T11746] proc_reg_write+0x23d/0x330 [ 288.697076][T11746] ? __pfx_proc_reg_write+0x10/0x10 [ 288.697122][T11746] vfs_writev+0x5df/0xde0 [ 288.697169][T11746] ? __pfx___mutex_trylock_common+0x10/0x10 [ 288.697220][T11746] ? __pfx_vfs_writev+0x10/0x10 [ 288.697261][T11746] ? __mutex_lock+0x1ca/0xb90 [ 288.697306][T11746] ? kmem_cache_free+0x2d1/0x4d0 [ 288.697351][T11746] ? __pfx___mutex_lock+0x10/0x10 [ 288.697407][T11746] ? __fget_files+0x20e/0x3c0 [ 288.697458][T11746] ? do_writev+0x132/0x340 [ 288.697499][T11746] do_writev+0x132/0x340 [ 288.697540][T11746] ? __pfx_do_writev+0x10/0x10 [ 288.697588][T11746] do_syscall_64+0xcd/0x490 [ 288.697637][T11746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.697671][T11746] RIP: 0033:0x7f4b83f8e929 [ 288.697696][T11746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.697727][T11746] RSP: 002b:00007f4b84d65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 288.697755][T11746] RAX: ffffffffffffffda RBX: 00007f4b841b6080 RCX: 00007f4b83f8e929 [ 288.697775][T11746] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000004 [ 288.697795][T11746] RBP: 00007f4b84010b39 R08: 0000000000000000 R09: 0000000000000000 [ 288.697814][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.697833][T11746] R13: 0000000000000000 R14: 00007f4b841b6080 R15: 00007ffdc49c9848 [ 288.697863][T11746] [ 288.697874][T11746] [ 288.958212][T11746] Allocated by task 11746: [ 288.962643][T11746] kasan_save_stack+0x33/0x60 [ 288.967365][T11746] kasan_save_track+0x14/0x30 [ 288.972083][T11746] __kasan_kmalloc+0xaa/0xb0 [ 288.976714][T11746] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 288.983178][T11746] memdup_user_nul+0x2b/0x120 [ 288.987888][T11746] proc_simple_write+0xc7/0x1b0 [ 288.992857][T11746] proc_reg_write+0x23d/0x330 [ 288.997573][T11746] vfs_writev+0x5df/0xde0 [ 289.001940][T11746] do_writev+0x132/0x340 [ 289.006238][T11746] do_syscall_64+0xcd/0x490 [ 289.010786][T11746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.016708][T11746] [ 289.019055][T11746] The buggy address belongs to the object at ffff8881453a3900 [ 289.019055][T11746] which belongs to the cache kmalloc-8 of size 8 [ 289.032787][T11746] The buggy address is located 0 bytes to the right of [ 289.032787][T11746] allocated 7-byte region [ffff8881453a3900, ffff8881453a3907) [ 289.047216][T11746] [ 289.049559][T11746] The buggy address belongs to the physical page: [ 289.055998][T11746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1453a3 [ 289.064867][T11746] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 289.072089][T11746] page_type: f5(slab) [ 289.076100][T11746] raw: 057ff00000000000 ffff88801b841500 dead000000000100 dead000000000122 [ 289.084715][T11746] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 289.093321][T11746] page dumped because: kasan: bad access detected [ 289.099762][T11746] page_owner tracks the page as allocated [ 289.105493][T11746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 22263673099, free_ts 0 [ 289.123251][T11746] post_alloc_hook+0x1c0/0x230 [ 289.128058][T11746] get_page_from_freelist+0x1321/0x3890 [ 289.133656][T11746] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 289.139590][T11746] alloc_pages_mpol+0x1fb/0x550 [ 289.144464][T11746] new_slab+0x23b/0x330 [ 289.148650][T11746] ___slab_alloc+0xd9c/0x1940 [ 289.153366][T11746] __slab_alloc.constprop.0+0x56/0xb0 [ 289.158777][T11746] __kmalloc_cache_noprof+0xfb/0x3e0 [ 289.164115][T11746] hub_probe+0xe01/0x3480 [ 289.168488][T11746] usb_probe_interface+0x300/0x9c0 [ 289.173649][T11746] really_probe+0x241/0xa90 [ 289.178192][T11746] __driver_probe_device+0x1de/0x440 [ 289.183520][T11746] driver_probe_device+0x4c/0x1b0 [ 289.188609][T11746] __device_attach_driver+0x1df/0x310 [ 289.194025][T11746] bus_for_each_drv+0x159/0x1e0 [ 289.198918][T11746] __device_attach+0x1e4/0x4b0 [ 289.203743][T11746] page_owner free stack trace missing [ 289.209127][T11746] [ 289.211476][T11746] Memory state around the buggy address: [ 289.217211][T11746] ffff8881453a3800: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 289.225386][T11746] ffff8881453a3880: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 289.233472][T11746] >ffff8881453a3900: 07 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc [ 289.241551][T11746] ^ [ 289.245635][T11746] ffff8881453a3980: fa fc fc fc fa fc fc fc 00 fc fc fc 00 fc fc fc [ 289.253716][T11746] ffff8881453a3a00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 289.261794][T11746] ================================================================== [ 289.306420][T11746] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.313718][T11746] CPU: 0 UID: 0 PID: 11746 Comm: syz.3.3467 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 289.325819][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.335899][T11746] Call Trace: [ 289.339207][T11746] [ 289.342161][T11746] dump_stack_lvl+0x3d/0x1f0 [ 289.346803][T11746] panic+0x71c/0x800 [ 289.350745][T11746] ? __pfx_panic+0x10/0x10 [ 289.355201][T11746] ? mark_held_locks+0x49/0x80 [ 289.360005][T11746] ? preempt_schedule_thunk+0x16/0x30 [ 289.365505][T11746] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 289.371520][T11746] ? preempt_schedule_common+0x44/0xc0 [ 289.377025][T11746] ? check_panic_on_warn+0x1f/0xb0 [ 289.382186][T11746] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 289.388198][T11746] check_panic_on_warn+0xab/0xb0 [ 289.393180][T11746] end_report+0x107/0x170 [ 289.397538][T11746] kasan_report+0xee/0x110 [ 289.401991][T11746] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 289.408011][T11746] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 289.413851][T11746] ? __lock_acquire+0xb8a/0x1c90 [ 289.418847][T11746] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 289.425057][T11746] ? find_held_lock+0x2b/0x80 [ 289.429829][T11746] ? __might_fault+0xe3/0x190 [ 289.434570][T11746] ? __might_fault+0xe3/0x190 [ 289.439302][T11746] ? __might_fault+0x13b/0x190 [ 289.444190][T11746] ? proc_simple_write+0x117/0x1b0 [ 289.449342][T11746] proc_simple_write+0x117/0x1b0 [ 289.454315][T11746] ? __pfx_proc_simple_write+0x10/0x10 [ 289.459807][T11746] proc_reg_write+0x23d/0x330 [ 289.464529][T11746] ? __pfx_proc_reg_write+0x10/0x10 [ 289.469767][T11746] vfs_writev+0x5df/0xde0 [ 289.474143][T11746] ? __pfx___mutex_trylock_common+0x10/0x10 [ 289.480082][T11746] ? __pfx_vfs_writev+0x10/0x10 [ 289.484975][T11746] ? __mutex_lock+0x1ca/0xb90 [ 289.489697][T11746] ? kmem_cache_free+0x2d1/0x4d0 [ 289.494677][T11746] ? __pfx___mutex_lock+0x10/0x10 [ 289.499753][T11746] ? __fget_files+0x20e/0x3c0 [ 289.504475][T11746] ? do_writev+0x132/0x340 [ 289.508937][T11746] do_writev+0x132/0x340 [ 289.513228][T11746] ? __pfx_do_writev+0x10/0x10 [ 289.518033][T11746] do_syscall_64+0xcd/0x490 [ 289.522580][T11746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.528502][T11746] RIP: 0033:0x7f4b83f8e929 [ 289.532947][T11746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.552584][T11746] RSP: 002b:00007f4b84d65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.561038][T11746] RAX: ffffffffffffffda RBX: 00007f4b841b6080 RCX: 00007f4b83f8e929 [ 289.569037][T11746] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000004 [ 289.577040][T11746] RBP: 00007f4b84010b39 R08: 0000000000000000 R09: 0000000000000000 [ 289.585040][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.593035][T11746] R13: 0000000000000000 R14: 00007f4b841b6080 R15: 00007ffdc49c9848 [ 289.601044][T11746] [ 289.604398][T11746] Kernel Offset: disabled [ 289.608746][T11746] Rebooting in 86400 seconds..