last executing test programs: 15.029639788s ago: executing program 1 (id=117): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa, "0000000000af0e00f3ffffff00"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 14.005581135s ago: executing program 1 (id=122): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000100)={{0x101, 0xee01, 0x0, 0x8, 0x400, 0xa, 0x1}, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x2, 0xfff, 0x89, 0x7, 0x9f, 0x3, 0x0, 0x7fff, 0x10, @inferred, @inferred=0xffffffffffffffff}) waitid$auto_P_PGID(0x2, r0, &(0x7f0000000180)={@siginfo_0_0={0xb8ab, 0x6, 0x8, @_kill={0xffffffffffffffff, r1}}}, 0x8001, &(0x7f0000000200)={{0xe, 0xfa1}, {0x7ff, 0x2}, 0xfffffffffffffffc, 0x32, 0x7, 0x1, 0x7f, 0x3, 0x6, 0x7, 0x5, 0xb, 0x6, 0x8, 0x35e9, 0x18e}) write$auto(0x3, 0x0, 0xfffffdef) 13.533491084s ago: executing program 1 (id=125): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D1\x00', 0x0, 0x0) r1 = prctl$auto(0x401, 0x1, 0x0, 0x4, 0x2) (async) write$auto(0xffffffffffffffff, 0x0, 0xfff) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) mmap$auto(0x100000000000, 0x7, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) (async) bpf$auto(0x5, &(0x7f0000000300)=@prog_bind_map={r1, r1, 0x90e7}, 0x4a) (async) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/power/runtime_active_time\x00', 0x129302, 0x0) (async, rerun: 64) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000080)="30e0ada6c1eae0530745e245f4cec9b87d3e990bc1750f9a349a", 0x1a) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x2000000005, 0x1823, 0x80000001, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x0, 0xfffffffffffffffa, 0xab, 0x0, 0x2]}, 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000180)=""/61, 0xfffffeeb) fstat$auto(r5, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffff0, 0x4, 0x74, 0x0, 0xffffffffffffffff, 0x0, 0x2c0000000000, 0x100000001, 0x38e08578, 0x4, 0x3c, 0x0, 0x8000000000000000, 0x1, 0xf6, 0x22}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000100)={0x5, r7, 0xc132, 0x1}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) (async) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) 12.613594931s ago: executing program 1 (id=128): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/blk_cgname\x00', 0x68c002, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 10.525330072s ago: executing program 1 (id=132): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) io_uring_setup$auto(0x1fe, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x111080, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0xa44) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) open(0x0, 0x0, 0x408) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x8011, 0x2, 0x8000) io_setup$auto(0xffff, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0x7fffffffffffffff, 0x405, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/vmci/power/runtime_active_time\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) 10.357663866s ago: executing program 0 (id=134): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socketpair$auto(0xfffffffd, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100318aad2d035324e97da7bd7000fd83dbdf250c0000000c000380080003800400058018000180140002006e657464657673"], 0x38}}, 0x24048084) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(r0, 0x0, 0x2) 9.961106144s ago: executing program 1 (id=135): setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x2200, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)="0400") (async, rerun: 32) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) socket(0x11, 0x3, 0x9) (async) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000340)="a504ff4c280e43904055ceb3bc98cf2af453126b06d1f8b678ad4700b35e33bf24e0c6269dd4fcfeafaacd781a0ee63a0f9cf51e53d742c6cd3e1a4531a69c151e3714d2418d3a55d79a314e8309e48778a229eef16577bd021ce7b48a29a4e1c32f5f0c3393287d", 0x68) (async) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x2, 0xc) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="01be3c8250af0cfdbc8bb2c91297699d7a3c3bc22ab22d958baa8cb6110e8d194e0219ca292fa973e559a479c72e5985fcb2989d72d696ad19236fac332086f67c7f7c8f269418", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) (async) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 9.077657397s ago: executing program 0 (id=137): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/is_selfpowered\x00', 0x448080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b72, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x805, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r4, 0x0, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gretap0/flags\x00', 0xc2082, 0x0) write$auto(r5, 0x0, 0x7ff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket(0x22, 0x4, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) 7.974921853s ago: executing program 2 (id=138): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd97, 0x2}, 0x0, 0x7ffffffff000, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) setsockopt$auto(r0, 0x0, 0x4, 0x0, 0x28) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000800), r1) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"cd88acfb9e850ce2dc69412d23191065c49996ba3e931ae0647607e5982768a9", 0x8000, 0xc, 0x4, 0x6, 0xc8, 0x0}) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000840)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x101200, 0x0) r7 = gettid() kill$auto(r7, 0x11) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000140)={0x5b4, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x2a8, 0x2e, 0x0, 0x1, [@generic="7d6d7ecd94c80d35d82011d30357e360516a71105ec5e37f19ce20a0124782764ef0587f5a28e817032eed02ba34d69f2a260977e856d29f4005608cbce7ae60dec76b527a54a17294612249a323dca77916755428e8d89f1da4916de3a3759dd59abe54c535d763469966db384b3bc909a66ff27976e772b88190f6fcdf64268f3fa0ddc7a7c62ab75a6a13b1d3f6a7f575fb", @nested={0x14f, 0x12d, 0x0, 0x1, [@generic="6508a2d6e93e8a3240c2e5ac2246360fa474dfe05dfb5feafc77fc75fafda6d243847381500f96829dc976dd07ecbbcb83e794df81445fc1cc1fa791d00424c887e3f85b4e13710f7523a749bcfbbc92665b3fb4517b9f3d92543fed91bef49c36eab4ade223695a5403", @typed={0x10, 0x140, 0x0, 0x0, @str='/proc/kcore\x00'}, @generic="086059d943985d0f20721b214532ee13c18e377d40a5e50a6ff064ddca006a3b86ba5c2619b8146aca4b73a046bbe9a16f1ee250b4d613adf9a4a340500ae6d74e227f5313d8788978838a9eade8adfeb596b587803552129af55a587ad09c7f62f340950d4704e1a310de3df9d8749a3c2c3ee758a5d7cb7215d9dbf73fddf32eb3096f53907572e43e85bdfc869f7c4e165443a6", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="0906c9c9923460533914ae17", @nested={0x4, 0x103}, @generic="4f29be199e61646c83334faaefec4f6afd7753843fe7455f3ce7619353818e7f00b7b1ac"]}, @typed={0xc, 0xdc, 0x0, 0x0, @u64=0xfffffffffffffff9}, @generic="243f7364b72ce25654465585e4c00f0b5c8942b2e2b601a08d55be96e20788d116536c55a4eb7e70", @nested={0x10, 0xa7, 0x0, 0x1, [@nested={0x4, 0x97}, @typed={0x8, 0x134, 0x0, 0x0, @uid=r5}]}, @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="2777cefffc494e63790451dd20bb16e8af2034fea414320d4945e338fb86b1e027be323fdb22b27a1b584b1f19e7d5259617b193b6040614a1c089f0b47ac57376b028a215", @generic="3760ac7946d71ba1d107ac50f6a98a7a726e12e88343c01dd44223f9", @typed={0x8, 0x11b, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xcf}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x7f}, @NL802154_ATTR_PEER={0x2be, 0x28, 0x0, 0x1, [@generic="973553bf05356d0e55b95b872b406a317116f568b2a93bccd7c3145f860e3ae30399d54f82a592db459906674945ff3cf764d81026011d6324e7f14d1a6c66f57431f52c6e28e59960ab8476c65b09fd9023b375b94041abbc5bf5756435885672d00edf1f73e033028f2a9bb4e73334af940e580bbd84f91ca4ccc6b2e7b27e963f", @nested={0x14e, 0x100, 0x0, 0x1, [@generic="d46970886ee271793ed9911fc6671ffc3594685ddc3f6a25716964e10732ba6edd8f3a94dc878161df0091d8bccc34ba9d8c3d19cabf6f0138a6e2f52fcb273092df77963d896cb11992a784b7e87f613490b5d56274afa77f57211cab4dd2d9f8155d9e65b26eb271c49c33e5ba9441de", @nested={0x4, 0x7e}, @typed={0x8, 0x5b, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xc9}, @nested={0x4, 0xfa}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r7}, @generic="516eadc208cc12150d957f604cf28ae1b30ac3171a65c4ee53bfc29fc6f9d17caba7e80f95652fa1bc3ad50d80fd4ae507d69ab14cf3606fea31f8b9f4698fee4d4a72188de17721869df0d3284fc47723193042bf3b5a83992255bebfcf849f5cf1330accac0cae0ca065214b0d5a22d8b64cdac8cca6cf2c3a920de4d0556f9239a49ae5", @typed={0x1f, 0xac, 0x0, 0x0, @binary="df568cd7351e953fc71d5074508c7bfe90bfa6554c82f011a1a0f3"}, @nested={0x4, 0xcb}, @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0xe8, 0x144, 0x0, 0x0, @binary="ec48cc8eb5ded32c243346c9d75e86d7be6fe31e8907521de58d34c3e39db8c89bcdb4543020af18c30792478cb548775cf2548e839d62206597a67efe4a2331478627acd5a44bf9be54f7c7397e1e670518bf02d0333cfc1f6b957022b097a944b8a951e80eb963d0562612a4179e63670d0111b0c45fc60d4afc7c488aa7a7a26d1098a895413772d54ca615a905d5a07b1c01db941b2c92052e6ae1358cbff9f68da679daf743792576d69616ceeead87de2bfaf55b7f1429de0b434bedf86101b4570299a0b9d377cdef7b59d4cd3574aa20fddf260cc6dbf68130c51c3c392ed7a2"}]}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x9}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 7.784242362s ago: executing program 2 (id=139): fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)="50a54f6ba2eabf1c3641084884", 0xfffffffffffffffe) r0 = bpf$auto(0xa, &(0x7f00000000c0)=@query={@target_ifindex, 0x4, 0x0, 0x2, 0x3, @prog_cnt=0xc, 0x0, 0xd8, 0x0, 0x56a, 0x1}, 0x91) (async) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000400)=@bpf_attr_3={0x5, 0xfffffffe, 0x9598, 0xfffffffffffffff9, 0x75a3, 0x3ff, 0x7fff, 0x3, 0xa47, "29ca002c412b73ef093546634ae2ab10", r2, 0x80000001, r0, 0x0, 0x299, 0x1, 0xe48, 0x5, 0x4, 0x0, @attach_btf_obj_fd=r0, 0x7, 0xfffffffffffffe00, 0x3ff, 0x21, 0x5, r0, r0}, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) (async) sendmsg$auto_NL80211_CMD_STOP_AP(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0xc460e25c89f2f226, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x2}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (async) msgctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000005c0)={{0x1, 0xee01, 0x0, 0x0, 0x401, 0x3, 0x6}, &(0x7f0000000540)=0xff, &(0x7f0000000580)=0xd, 0xffff, 0x3, 0xf474, 0xfffffffffffffff8, 0x800, 0x69b, 0x0, 0x5, @raw=0x1, @raw=0x9418}) (async) ioctl$auto_BLKTRACESETUP2(r3, 0xc0481273, &(0x7f0000000640)={"75e9af23aa58f7ac7872606dcdb83f867effaf12531be5448cbc4f7f26f345f1", 0x6, 0x7, 0x6, 0xfffffffffffffff7, 0xad6, 0xffffffffffffffff}) (async) r10 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r10, &(0x7f0000000080)) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001c40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f00000006c0)={0x1540, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_LINKS={0x36c, 0x138, 0x0, 0x1, [{0x368, 0x0, 0x0, 0x1, [@NL80211_ATTR_PMKR0_NAME={0x42, 0x102, "34a024e28b2956d0004f96a4f7d3bc4fcdce307240989bd43049621a7fc5e02203a6923a310cd2f076c13c1afb10552e8f1411fc229d1ed5fb3e088a6158"}, @NL80211_ATTR_FILS_ERP_REALM={0xc0, 0xfa, "3d7fd273c6b1df51c5cfd3dc9968cc5b2b29d775e32cd8a5edfecb9d511d5eb548ed226a1e7bda99372c36a7a740b7bc215d17f1116263f0fe922eeacb480c05e9d3d5d526c62f51bc49b30dd0c87285e87bba665704c4a53174c403ce67cc5af46734e89ca160dcac075be5bbb2556166f3eac12e5e3b490ff0d35e3a800ef71f5f16541de973eeb6b3f582ecdb5ba35a969a7751daa81e9623c046e75a41d2e2b213b324322ca83b9b2338d233646608a4de6e86609df35ac96a56"}, @NL80211_ATTR_TXQ_LIMIT={0x8}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x21a, 0x23, 0x0, 0x1, [@nested={0x8, 0x80, 0x0, 0x1, [@nested={0x4, 0x73}]}, @typed={0x8, 0x5, 0x0, 0x0, @uid=r8}, @typed={0xee, 0x47, 0x0, 0x0, @binary="e976f6286c0caf59b1a928f7ebb294df791c8979088821f258be61830e9caa8b40d4221ebbbeba97efd5ab18001e00d05a364205904b05b047fb007c169d556e728d0c708e45ace4693cf6644615a32f49210c4ea923891cf68665c7a3bc19fc0b1f01b08fe1f3155c890ea3deb92f6170365567766fbb3f80bbe9f4e7f8d993ca500bc8a9de1e08b192ff586b8408a0762ae03e4ac2fd2c5c8aab02a23dd1af0c836c1fb636bfc0e78db023f8df081d52be3ed018ad9fa5f463e20d11fa663a174fd50c0cce6e6419b246e430f4f9d7bfd8896962f6172cd6acc7fd4474cb1dbcc9bab85586cd8a3b54"}, @generic="d5f3e0e31b4393ece02a23", @generic="437609bb1c4a0beff344f5a9e5982d7f7401e97ba5e0f4b419b543857ffe1eb1e2e59bc2d09649d1faa7dad378c8db13614fbdb49925ec238b148b560a94b4a27edc7d619228c043a067173ae5c2ab75d89f7e63616aaa0e54a303c8524a81308991e6fd168f3a847f2d768c20dc187e6537932fe04898ea23c5f70e9cc2c811e6d79d0c598d39a9d422472499577b4796cded94bb628b15a46a0228c3eb90a52c14d199f663b19cf2426d438836a61c3d72162553b3877813d9dea7627ade450f2b6cde06af676a60f22c91c08cc2f7adcbe7de89863218be7b6b03aeda09cb06fe79ca82288302294b07d9fe6e2bfcac923a0db1c005", @typed={0x14, 0x55, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, "d9bc4c6b88b5df9ad107a3e65c04d02fa54bc74d46abce0242eaea"}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x2}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x15f, 0x124, 0x0, 0x1, [@generic="5a23bbc715694a86fd91740dc220c541644818ec34be5602d4bc5fc215758ccd775a68054d2cc03dfd161002ad6f761f175c77d7ebd8102f79c20aa60cb54d9b065281129ba3279de0c8e2400edf12ead93f5a1b1d48a1b0f5d0b6095af9044aa738fa0da6f88d0a0134d57635dee8a0873ab9e8c8d20b2cf3bf18499218d5e3947a8e6f62ed4a41340da78062c2467c1f22a9e0ae1686a7859c8b781cf3a7336450206f0d6a5b195e126b7c285a08ccea812f86d6b2dba1abfdabb816a62d", @nested={0x80, 0x87, 0x0, 0x1, [@generic="3065727ea8e8351f88c1858bdcfb8c168df393bfa82bb1843bfcc3cac5017ba6348e39919b62f424f273cc47b6b50864a58631d47464021d7a9a2d6c86164cd04a45e79a02ee0f9cf239b25c7d41087ec8df6bd031588c0d961a56838149be483eba568082900fac8acc2adfefdffbabc57e06c0f1120451aa63a0eb"]}, @typed={0x8, 0xc5, 0x0, 0x0, @uid=0xee01}, @nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @pid=r9}]}, @typed={0x8, 0x10, 0x0, 0x0, @pid=r10}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_STA_WME={0x24, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_FILS_NONCES={0x1004, 0xf3, "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"}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "3eb1ed3f214b380ae57d08f7857aea27ae4d5c411c964ce85fe0"}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x28}]}, 0x1540}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000180)={{0x3, 0xffffffffffffffff, 0xee01, 0x5, 0x9, 0x1, 0x4}, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x2, 0x2, 0xe, 0x7fff, 0xfffffffffffffe00, 0x200000000000000, 0x101, 0xfffc, 0x0, @raw=0x7fff, @raw=0x5}) (async) shmctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000240)={{0x1000, 0x0, 0xffffffffffffffff, 0xfffffffa, 0x14ff, 0x69a, 0x9}, 0x1, 0x2, 0x8c, 0x100000000, @raw=0x2, @raw, 0x7, 0x0, &(0x7f0000000080), &(0x7f0000000200)="30797f4fbda8fd48656230df025865016d5ba805dcdada403486920a21fa6966fda8f8"}) msgctl$auto_IPC_SET(0x101, 0x1, &(0x7f0000000340)={{0x3, r11, r12, 0x1, 0x8, 0xfffffffd, 0x8}, &(0x7f00000002c0)=0x10, &(0x7f0000000300)=0x4d, 0x1000, 0x5, 0x2, 0x7, 0x3ff, 0x3, 0x7, 0x6, @raw=0xffff, @raw=0x1}) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r13 = socketpair$auto(0x8, 0x2, 0x80000001, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) (async) ioctl$auto(r13, 0x9, r13) (async, rerun: 32) r14 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) (async, rerun: 32) r15 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto(r15, 0x4001af83, r14) ioctl$auto_VHOST_SET_OWNER(r15, 0xaf01, 0x0) (async) setsockopt$auto_SO_CNX_ADVICE(r4, 0x3, 0x35, &(0x7f00000004c0)=']):\'&(-\xff\x00', 0x3) 7.167310513s ago: executing program 0 (id=141): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r1, 0x0, 0xa0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 6.859586426s ago: executing program 2 (id=142): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(r0, r0, 0x9) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13002cbd7040dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000200006810ae0b00ff070000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf25650000000400730008000c007b0e00000500d30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x8080) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4, 0x3d, r2, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 5.809477052s ago: executing program 2 (id=144): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4b, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) socket(0x2, 0x1, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="b4040000", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf2511000000080005000300000008000500010400009004038008004d00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x4b4}}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) 4.891035444s ago: executing program 3 (id=145): socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x2c6, 0x0, 0x5a, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0xd4, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x84) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0xf, 0x9, 0xfffb, 0x406, 0x2, 0x9, 0xb84, 0xfffffffffffffffd, 0x9, 0x2000000000000003, 0x6, 0x1fd, 0x2]}, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x10a, 0x0, 0x9, 0x3fb}, 0x4}, 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)=""/175, 0xaf) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) ioctl$auto(0x1, 0x890b, 0x8) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0xf2) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x9, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) 4.800641705s ago: executing program 2 (id=146): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = socket(0x2, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x11, 0x0, 0x40000008) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2c00, 0x0) ioctl$auto_MEMREADOOB(r3, 0xc0104d04, &(0x7f0000000080)={0x7761, 0x80, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x143101, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000240)={0x9, 0x49f, 0x0, 0xf583}) mmap$auto(0x2, 0xf, 0x3, 0x44eb5, r2, 0x300000000000) close_range$auto(0x2, 0x8, 0x4) socket(0x2, 0x2, 0x1) semctl$auto_IPC_INFO(0x10, 0x3, 0x3, 0x1) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000200)={0x9, &(0x7f0000000040)={0x89, 0x4, 0x7, @raw=0x7ff}}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 4.040350576s ago: executing program 0 (id=147): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd97, 0x2}, 0x0, 0x7ffffffff000, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) setsockopt$auto(r0, 0x0, 0x4, 0x0, 0x28) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000800), r1) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"cd88acfb9e850ce2dc69412d23191065c49996ba3e931ae0647607e5982768a9", 0x8000, 0xc, 0x4, 0x6, 0xc8, 0x0}) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000840)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x101200, 0x0) r7 = gettid() kill$auto(r7, 0x11) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000140)={0x5b4, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x2a8, 0x2e, 0x0, 0x1, [@generic="7d6d7ecd94c80d35d82011d30357e360516a71105ec5e37f19ce20a0124782764ef0587f5a28e817032eed02ba34d69f2a260977e856d29f4005608cbce7ae60dec76b527a54a17294612249a323dca77916755428e8d89f1da4916de3a3759dd59abe54c535d763469966db384b3bc909a66ff27976e772b88190f6fcdf64268f3fa0ddc7a7c62ab75a6a13b1d3f6a7f575fb", @nested={0x14f, 0x12d, 0x0, 0x1, [@generic="6508a2d6e93e8a3240c2e5ac2246360fa474dfe05dfb5feafc77fc75fafda6d243847381500f96829dc976dd07ecbbcb83e794df81445fc1cc1fa791d00424c887e3f85b4e13710f7523a749bcfbbc92665b3fb4517b9f3d92543fed91bef49c36eab4ade223695a5403", @typed={0x10, 0x140, 0x0, 0x0, @str='/proc/kcore\x00'}, @generic="086059d943985d0f20721b214532ee13c18e377d40a5e50a6ff064ddca006a3b86ba5c2619b8146aca4b73a046bbe9a16f1ee250b4d613adf9a4a340500ae6d74e227f5313d8788978838a9eade8adfeb596b587803552129af55a587ad09c7f62f340950d4704e1a310de3df9d8749a3c2c3ee758a5d7cb7215d9dbf73fddf32eb3096f53907572e43e85bdfc869f7c4e165443a6", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="0906c9c9923460533914ae17", @nested={0x4, 0x103}, @generic="4f29be199e61646c83334faaefec4f6afd7753843fe7455f3ce7619353818e7f00b7b1ac"]}, @typed={0xc, 0xdc, 0x0, 0x0, @u64=0xfffffffffffffff9}, @generic="243f7364b72ce25654465585e4c00f0b5c8942b2e2b601a08d55be96e20788d116536c55a4eb7e70", @nested={0x10, 0xa7, 0x0, 0x1, [@nested={0x4, 0x97}, @typed={0x8, 0x134, 0x0, 0x0, @uid=r5}]}, @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="2777cefffc494e63790451dd20bb16e8af2034fea414320d4945e338fb86b1e027be323fdb22b27a1b584b1f19e7d5259617b193b6040614a1c089f0b47ac57376b028a215", @generic="3760ac7946d71ba1d107ac50f6a98a7a726e12e88343c01dd44223f9", @typed={0x8, 0x11b, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xcf}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x7f}, @NL802154_ATTR_PEER={0x2be, 0x28, 0x0, 0x1, [@generic="973553bf05356d0e55b95b872b406a317116f568b2a93bccd7c3145f860e3ae30399d54f82a592db459906674945ff3cf764d81026011d6324e7f14d1a6c66f57431f52c6e28e59960ab8476c65b09fd9023b375b94041abbc5bf5756435885672d00edf1f73e033028f2a9bb4e73334af940e580bbd84f91ca4ccc6b2e7b27e963f", @nested={0x14e, 0x100, 0x0, 0x1, [@generic="d46970886ee271793ed9911fc6671ffc3594685ddc3f6a25716964e10732ba6edd8f3a94dc878161df0091d8bccc34ba9d8c3d19cabf6f0138a6e2f52fcb273092df77963d896cb11992a784b7e87f613490b5d56274afa77f57211cab4dd2d9f8155d9e65b26eb271c49c33e5ba9441de", @nested={0x4, 0x7e}, @typed={0x8, 0x5b, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xc9}, @nested={0x4, 0xfa}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r7}, @generic="516eadc208cc12150d957f604cf28ae1b30ac3171a65c4ee53bfc29fc6f9d17caba7e80f95652fa1bc3ad50d80fd4ae507d69ab14cf3606fea31f8b9f4698fee4d4a72188de17721869df0d3284fc47723193042bf3b5a83992255bebfcf849f5cf1330accac0cae0ca065214b0d5a22d8b64cdac8cca6cf2c3a920de4d0556f9239a49ae5", @typed={0x1f, 0xac, 0x0, 0x0, @binary="df568cd7351e953fc71d5074508c7bfe90bfa6554c82f011a1a0f3"}, @nested={0x4, 0xcb}, @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0xe8, 0x144, 0x0, 0x0, @binary="ec48cc8eb5ded32c243346c9d75e86d7be6fe31e8907521de58d34c3e39db8c89bcdb4543020af18c30792478cb548775cf2548e839d62206597a67efe4a2331478627acd5a44bf9be54f7c7397e1e670518bf02d0333cfc1f6b957022b097a944b8a951e80eb963d0562612a4179e63670d0111b0c45fc60d4afc7c488aa7a7a26d1098a895413772d54ca615a905d5a07b1c01db941b2c92052e6ae1358cbff9f68da679daf743792576d69616ceeead87de2bfaf55b7f1429de0b434bedf86101b4570299a0b9d377cdef7b59d4cd3574aa20fddf260cc6dbf68130c51c3c392ed7a2"}]}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x9}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 3.387427285s ago: executing program 3 (id=148): rseq$auto(&(0x7f0000000000)={0x9, 0x805, 0x8, 0x2, 0x8a3b, 0xf, "40d30d9a35133c9c13f5332030e896d3e6fbd0a7fbf00ab453a42c879ffaa7491faa6be3a86d58dcb0e5369a9b32df4d26c288d23161708fb8d996a4969d6202312a5b1f4571d696392528854c3f201ff4c9f734113c9fb30b2f3bd12fd78fafbb5c758234b1e448370407a9737205b2e13b4f850cb2228ef88aa9047cb1fcc514f8353f0a1196d701d0da2cf24f6207654c90"}, 0x6, 0x0, 0xf4) rseq$auto(&(0x7f00000000c0)={0xe, 0x1000, 0x4, 0x8, 0x0, 0x1, "09bcb289390209c89fd591a2e17abbd0bea2d3c1341e4efb6ec27b3c0553f69c6f0c0465d01daa41873a765c557f4afdc8b1d88c70ce08675e5201f25e7ad64060b242"}, 0x8, 0x6, 0x40000) rseq$auto(&(0x7f0000000140)={0x8000, 0x3, 0x0, 0x1, 0x9, 0x2, "0a3a3a736bb69d6565c9ced96897d4077853e5ea9b68ed2c5a06ece4568a43743f82bc3a31832519bdcca85424fc79842fb92e8e4805c87eadc881b33d50af50bfaddb8a423ffcd3ba30473efdc5ddae33f7f14f4e0f2b291445481c2ee902bd18b4cb6c8ffe20b80f45dd6d84e9054f7710c3c29c90e0f234f7a1b60292419e721eb1423f6840e59355af19335a76da432223f9f7cfdfe71a07d0d0d33f73e09469e2112754e194b3e9f249796085155df86b51c3a19de0004f49214e044a8d2925654c8bb0e6756dc9"}, 0x4, 0x92bf, 0x9) rseq$auto(&(0x7f0000000240)={0xfff, 0x5, 0x4, 0x80, 0x3, 0x3, "839321ecf813ada162c147aeb6b3ad6dea4ddc25"}, 0x10000, 0x4, 0x72) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0x230700, 0x0) rseq$auto(&(0x7f00000002c0)={0x10, 0x0, 0x6, 0x164f, 0x36b7, 0x9, "eb8c84c818ec20817d2190194120a7e7537158ed557569a986ff3a964848e591b6f421a4906aa007d2a72be51fdfbfd320bf0bc81527251867a7d5104e0d86b845188ca1723713fe27847a317c54b667ca604f29625a2fb1e57ef910a1e1ca5bb71babdfc0cf1fc32f016740feac420b05edcc99531de7fab8697b20cc488214997228ff5c4c72450ee7bab5fed0e2f2ccbc1903af17af1348eca484909886bc15beef299c37a30335fdab369c25689587007aeee7d0a66fc8bcdebd2679f476d4cf0658ed95cb8d4ccd113b6838d15810a6dcd7f2f002f2cd1a02d28df1fe9ec161f3da8c3ea3d856185eb9401f25ce4a7175ce"}, 0x1ff, 0x7, 0x8001) r0 = clone3$auto(&(0x7f0000000400)={0xfffffffffffffffd, 0x3, 0x3ff, 0x3, 0x1000, 0xa, 0x10, 0x100000000, 0xffffffffffffffff, 0x800, 0xe}, 0x7f) rseq$auto(&(0x7f0000000480)={0x1, 0x3, 0xe32, 0xffffffff, 0xb74, 0x28d, "5c9072157f38f68978428320d03b03d5ccb4b45aeeb8cdf7dc5cb5362a943cee"}, 0x5, 0x2fc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xba77cee583c2baac) r3 = clone3$auto(&(0x7f0000000600)={0x0, 0x800, 0x9a, 0x94, 0x0, 0x9, 0x9, 0x100000000, 0xa0, 0x4, 0x2}, 0x6) shmctl$auto_IPC_STAT(0x7fffffff, 0x2, &(0x7f00000008c0)={{0x9, 0x0, 0xee00, 0x5, 0x3363, 0x3, 0xe246}, 0x6, 0x4, 0x1, 0x9, @inferred=r0, @inferred=r3, 0x2, 0x0, &(0x7f00000006c0)="f0fa0f9de2dbd9735560a2082b693bee6fadc990c6f4c644654139a0e924ca5f06930597bd5433b0474f5b5cd8137811b5eef3a56434b62943b2d5e387c2c19f5b26a788cecba4366a47230099bc3816a9d1ff33b40d9b9636df31f827df3d19b3fb8fa8438ff9142de4a0672e2f7a35ffd03a8c60edc63d2b5431fa9ed1fefb601e5ac8ec152ae864154114e95337fd62f63965e6cf3db1f42bd0b391a6421828f88a14e09961336f6180f0a6321fb57087027295acdccaabe90b8e4db49b7e1f4fbd0a5fc20e114eb94e7950be6498dde2a04cfeffb4751f36eb8bae82d32e1c31316b9336c646df0b3d2872c73a87a3c523", &(0x7f00000007c0)="b4aee5e959957964fe04d8243ef1b123adacf223e963fb87aff3521520e5457a3d4b1bbaa60a34312d412e37b3e60d417d0947c877cc0349753c436361d448f516501a64bf0ff3df98a685add54a83187ab4ef20cd2b1767a792fda230f35b3c29ba5c04622480b6cfe7cc529825bce7fa4b5855a54c010b1e1a71ce225688ac42f1c9767a1bd315e42d4d7dc6749f23c60177abcddd477a322737d64f9a098529c7089043e2b5caea6395d4974efa8e37f834283754de0eb88d818ecd8c035de07f5a2e51ff17e4201c3100d34bb895cfa133516febb723b28db95ffa55028ed85e6874"}) lchown$auto(&(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, r4) r5 = eventfd2$auto(0x5, 0xa9d6) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f0000000940)=""/252, 0xfc) ioctl$auto_TCSBRKP(r5, 0x5425, &(0x7f0000000a40)="92be662aef15d3e2206036664c6e00159edf215c276a5c18b3b58a56c3b150d90f6a06df09bf2405ae04c0393f12b69beadba198ee9ae9a82dbfaa6a00bd19d30153cd17d447e9ee866a99377e2b9806ce423cc439ab9b83f8b1ced537159c10bca66a4fe9f2be567a1b28ecb0ad3fb1998f463525d57e2005d4b913dde0f338") openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/snd/midiC2D3\x00', 0x200, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000b00), r5) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000b80), r5) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xa}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x96}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004080) ioctl$auto_XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f0000000c80)={0xffffffffffffffff, 0xae}) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d00), r5) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xd6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'bridge0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_snd_seq_f_ops_seq_clientmgr(r7, &(0x7f0000000e80)=""/222, 0xde) r10 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000fc0), r9) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0xa20800}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x108, r10, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_NONE={0xda, 0x0, "89b7c93be35e65292f34c192c1bc47e9ba406e63dd672be640bc9a118e662ed045b1672e34baf9635b40c0bca6e45ba230cffaca9a687c2054dfe3cafe812a950945a12d441d6c4300fcabc53f99fe767c9a0c51bd72afec8e98524f19d1c4a91f332681270f282e9f420bfec31dec0aaf4a6ece7941603d051cb21b95801019f9c3741ce8830306bc393dfd4f895d0755e7444e4faf5e62ecfc384ccbd4218f31b70114da9871cb1010064bdcdc8951ecef7e12d20708c6d34455030ea0a67bce3e330979fe21d5a0c404529ba22f42e89e7b19dff6"}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0xe}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x108}}, 0x4008055) rseq$auto(&(0x7f00000011c0)={0x9, 0x4a7, 0x0, 0x6, 0x101, 0xd, "09c149e267af691e096ed6b6fa06e8de5fa94b22779794bc63cc0e462d9378f855721e84a911280fa29dcda77eca90128dfec35ac3111dc93a9259845509e79a40480d00b9ab9838e2fa56452e8245ab41e129fa7c9c91cb12b1fe5eb36103b4dc1671aa0d6e39d2a3382772ff52d066d8"}, 0xff, 0x6, 0xc8) 3.37642543s ago: executing program 0 (id=149): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x4c800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r3, &(0x7f0000000000)='-\x00', 0x30) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xb, "444cf575c02dd753ff403ac8c6ea"}, 0x6a) read$auto(r0, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) seccomp$auto(0x2, 0x10, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) 3.177744627s ago: executing program 3 (id=150): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0180, 0x0) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x4}}, 0x53) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x1, 0x11) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(0xffffffffffffffff, 0x80184132, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS642(0xffffffffffffffff, 0x80984120, 0x0) stat$auto(0x0, &(0x7f0000000380)={0x506f, 0x7, 0x80000000000000, 0xfffffff2, 0x0, 0xee01, 0x0, 0x2, 0x101, 0x4, 0x1, 0x20fd, 0x3ff, 0x800000401, 0x5f54, 0x0, 0xfffffffeffffffff}) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) listmount$auto(&(0x7f0000000000)={0x4, @raw=0x7, 0xd8f, 0x200, 0x3}, 0x0, 0x2, 0x1) writev$auto(r3, &(0x7f00000003c0)={0x0, 0x8}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r4, 0x8910, 0x0) 3.105260267s ago: executing program 2 (id=151): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x5, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2085c2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000300)=0x8) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) pread64$auto(r3, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 2.215051911s ago: executing program 3 (id=152): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0xa44) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x62d4) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0xffff, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf2503000000040008000c00018008001400ac145ddec9c85740d03ede32f6db700e0001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f00000002c0)={{0x8, 0xee01, 0x0, 0x2, 0x5, 0xffff, 0x800}, &(0x7f0000000180)=0x10, &(0x7f0000000280)=0x1, 0x799dda10, 0x9, 0x6, 0xffffffff, 0x8, 0x0, 0xe, 0x6, @raw=0xc, @raw=0x9}) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000003b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003b00)={&(0x7f0000003b80)={0x11d0, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_UFID={0x5}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x3}, @OVS_FLOW_ATTR_MASK={0x119d, 0x7, 0x0, 0x1, [@generic="b1697b7a7e4c100c5d2f08d7e8d98a2a6821c47738c60790661e5cf93687bd2b96316d03d4da7884241b806cde1915784f9c20e0fc751dcb15d4fceed6b1ece6059aa7a91b52b5ee8b4614ff95af1ef3b364e7c6740182454cd5833a5b3edb7e894316bb5d6da3d6254b407f1c747737f8adc81c820e093bb0e228da061521b53d1ed9ad9b887837298585b70662c6af3da0545b74620b328124fddbefa4b37aa07b", @generic="326791903ca0b898d174723be8be0d5c6d8a051e3ae64ad74589efb3717b89659aa305cb499f7397dd33585ffcdaa04029e03c1d935d45893cabfd3da28c82faa8f436df92926fb79a8469cfa490c8e81b97a4", @nested={0xfd0, 0xf2, 0x0, 0x1, [@typed={0xb1, 0xc5, 0x0, 0x0, @str='L\xc0__\xbeH\x0f\xa4\xca)\x82\a\xff\x99\xe4\x01\xb9\xe0AWR\xce\x1e\xae\x0f\xaa`)\xd9P+\x1d\xfb\xe0\x03\x82\xeb\x86$\x9e\xef\x8cj7K\x9e\xe2kwGs\xb94\x1eCG\x13\xe3:+^\xbd\xc1c\xdd\xd4}\xc6\xcd\xcf\xef\x936y\xaa\v\x15m\xde\xf8\x8d\x86!n *lXP\xf0\xde\xc3{\x06[f}Bk\xfa\xa8\x81\xdf\xb5\xfa\xe6\xb8P./\x17N\x0f\xf5<\x1aF]7 \x14e\xe6\xaaJc\xa2Mz\xf0\xc8\xb2\xce\a0\xa3B\xef\a\x9epY\xb1Oh\xbd\xf5\x13lV\f6\xd4`\xa6\t\xbc^\xe4b\xac\xad\xa1?\xa7\xf5\xff\x9b\xff\xda~#*'}, @nested={0x4, 0x73}, @generic="bba7656584c4f9629fd6482e29acfd17363addb9f965dc585a4c99d4733bdc6d8cf71ba1467d56630c8462c7de902f9d89f934c9dc43ce05345abeacb45ffeaf4db5abd8a097a2dfab6d4c14bb47d53f84f45003c7dc56b3c4a97355df6a1f046c096e226629b5eabd23453605ecc063bf7950b395e317afede3fa709524e51f327e676280a6f2f22307b569d585f49751c9cbd5ad4af0ee40e66eb242aaa4f9c2f66fc16c5e1773b8d31b552bcd1a4774f94cd6e51cb3254b6c3c5adba25b2e816b46b72f9c652247bc8c5d26272f90dc6c5e2b898828fd721fc3c838c87967d3c96e4c35e398b7f7f57114c8c9bdf7b10ea470b9b7", @nested={0x4, 0x98}, @generic="889a123ac33a67a732be1e6b7ea383c4e7738d00a944c8b14f434a623b350fe77842729d06dee0049f3639ea190ee153900451afd788095f526b910acf1891bc87fb43d45e41d512567e29d139970cc20846", @generic="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"]}, @typed={0x8, 0xad, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="20be1790ba93ec9a9fd251b8b00027b4e352ad1307e6768184d1fba918a2393b09aa26aba68274f05131bb7e172bbd13d4425e7818456f90a67be9a48387fc4faa0d8fe9d15e8e56b164bb21580931aa81c4aaadd50856c52e1e908c893f2e75dce71d", @generic="a39224c8dd77ba3efec3c9c4c36784e8907fe4729936b601ce52d60369c6afbb87ecafa9e62c47cbbb9cd5a00312ca7cc10481fa6cad76c8d35c79fa88453c03844977ae5d18acbec40399435d3736ed094410399eab19f097b245dea0f6fd6f273c592e60a3709a9d"]}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x11d0}, 0x1, 0x0, 0x0, 0x40000}, 0x804) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) 825.608619ms ago: executing program 3 (id=153): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000300)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1800009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x141002, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 669.593685ms ago: executing program 3 (id=154): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8004020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0xfffffffffffffffe, 0x20948b, 0x2, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 0 (id=155): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r1, 0x0, 0xa0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 81.134215][ T5851] cgroup: Unknown subsys name 'net' [ 81.268722][ T5851] cgroup: Unknown subsys name 'cpuset' [ 81.277127][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.768615][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.702732][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.716405][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.725701][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.734026][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.741814][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.767719][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.781368][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.789851][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.797952][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.806412][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.814105][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.826570][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.834422][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.841788][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.850352][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.879155][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.888676][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.897384][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.920658][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.928652][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.153522][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 85.376900][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.384093][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.391646][ T5860] bridge_slave_0: entered allmulticast mode [ 85.398753][ T5860] bridge_slave_0: entered promiscuous mode [ 85.433085][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.440541][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.447773][ T5860] bridge_slave_1: entered allmulticast mode [ 85.454756][ T5860] bridge_slave_1: entered promiscuous mode [ 85.604014][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 85.629892][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.645015][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 85.673346][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.751551][ T5860] team0: Port device team_slave_0 added [ 85.769347][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 85.785976][ T5860] team0: Port device team_slave_1 added [ 85.876316][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.883496][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.891069][ T5865] bridge_slave_0: entered allmulticast mode [ 85.898592][ T5865] bridge_slave_0: entered promiscuous mode [ 85.907943][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.915067][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.922352][ T5865] bridge_slave_1: entered allmulticast mode [ 85.930319][ T5865] bridge_slave_1: entered promiscuous mode [ 85.937732][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.944674][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.971411][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.011833][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.019098][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.045530][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.091887][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.099208][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.106750][ T5870] bridge_slave_0: entered allmulticast mode [ 86.113639][ T5870] bridge_slave_0: entered promiscuous mode [ 86.143131][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.156135][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.184447][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.192339][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.200040][ T5870] bridge_slave_1: entered allmulticast mode [ 86.208035][ T5870] bridge_slave_1: entered promiscuous mode [ 86.263295][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.270971][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.278460][ T5864] bridge_slave_0: entered allmulticast mode [ 86.285492][ T5864] bridge_slave_0: entered promiscuous mode [ 86.305624][ T5865] team0: Port device team_slave_0 added [ 86.317647][ T5860] hsr_slave_0: entered promiscuous mode [ 86.323992][ T5860] hsr_slave_1: entered promiscuous mode [ 86.343190][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.351004][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.358434][ T5864] bridge_slave_1: entered allmulticast mode [ 86.366317][ T5864] bridge_slave_1: entered promiscuous mode [ 86.374283][ T5865] team0: Port device team_slave_1 added [ 86.394899][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.408063][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.477026][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.489886][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.499947][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.507504][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.534213][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.548149][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.555092][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.581567][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.629864][ T5870] team0: Port device team_slave_0 added [ 86.662319][ T5864] team0: Port device team_slave_0 added [ 86.670576][ T5870] team0: Port device team_slave_1 added [ 86.691565][ T5864] team0: Port device team_slave_1 added [ 86.806191][ T5865] hsr_slave_0: entered promiscuous mode [ 86.812811][ T5865] hsr_slave_1: entered promiscuous mode [ 86.820020][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 86.826642][ T5865] Cannot create hsr debugfs directory [ 86.826648][ T51] Bluetooth: hci0: command tx timeout [ 86.832798][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.845137][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.872729][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.884736][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.892829][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.919715][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.926119][ T51] Bluetooth: hci1: command tx timeout [ 86.944605][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.956494][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.985418][ T51] Bluetooth: hci3: command tx timeout [ 86.987664][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.991371][ T5866] Bluetooth: hci2: command tx timeout [ 87.006492][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.013870][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.044828][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.189123][ T5864] hsr_slave_0: entered promiscuous mode [ 87.195565][ T5864] hsr_slave_1: entered promiscuous mode [ 87.201577][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 87.207658][ T5864] Cannot create hsr debugfs directory [ 87.288584][ T5870] hsr_slave_0: entered promiscuous mode [ 87.294741][ T5870] hsr_slave_1: entered promiscuous mode [ 87.301054][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 87.306853][ T5870] Cannot create hsr debugfs directory [ 87.534668][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.546964][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.574516][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.605621][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.709268][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.723732][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.738430][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.750653][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.849850][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.882046][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.893197][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.907449][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.051538][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.064187][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.079265][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.097175][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.114048][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.169839][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.180585][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.209199][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.216687][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.246172][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.253327][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.280990][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.309614][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.316725][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.342232][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.349418][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.523103][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.539967][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.573924][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.643127][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.650387][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.707730][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.714888][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.736300][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.762506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.769771][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.821012][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.842359][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.849567][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.916449][ T5866] Bluetooth: hci0: command tx timeout [ 88.932324][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.987655][ T5866] Bluetooth: hci1: command tx timeout [ 89.032365][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.047170][ T5860] veth0_vlan: entered promiscuous mode [ 89.065495][ T5866] Bluetooth: hci3: command tx timeout [ 89.065931][ T51] Bluetooth: hci2: command tx timeout [ 89.115024][ T5860] veth1_vlan: entered promiscuous mode [ 89.193545][ T5865] veth0_vlan: entered promiscuous mode [ 89.241328][ T5865] veth1_vlan: entered promiscuous mode [ 89.302359][ T5860] veth0_macvtap: entered promiscuous mode [ 89.322940][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.340204][ T5860] veth1_macvtap: entered promiscuous mode [ 89.390080][ T5865] veth0_macvtap: entered promiscuous mode [ 89.431419][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.443287][ T5865] veth1_macvtap: entered promiscuous mode [ 89.474353][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.501854][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.513168][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.524877][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.544174][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.557113][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.566087][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.590472][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.601617][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.612505][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.640334][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.654184][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.661650][ T5870] veth0_vlan: entered promiscuous mode [ 89.713487][ T5870] veth1_vlan: entered promiscuous mode [ 89.804211][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.821374][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.869975][ T5864] veth0_vlan: entered promiscuous mode [ 89.899376][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.902005][ T5870] veth0_macvtap: entered promiscuous mode [ 89.908060][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.926173][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.930202][ T5864] veth1_vlan: entered promiscuous mode [ 89.939709][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.974541][ T5870] veth1_macvtap: entered promiscuous mode [ 89.997592][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.018095][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.051845][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.070937][ T5864] veth0_macvtap: entered promiscuous mode [ 90.081380][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.112792][ T5864] veth1_macvtap: entered promiscuous mode [ 90.122135][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.173550][ T2960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.211915][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.250181][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.261310][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.273142][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.332746][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.342005][ T5954] random: crng reseeded on system resumption [ 90.383141][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.463170][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.519562][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.544966][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.573810][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.605111][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.774764][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.784654][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.848901][ T5957] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[5957] [ 90.985744][ T51] Bluetooth: hci0: command tx timeout [ 91.018808][ T5961] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.069947][ T51] Bluetooth: hci1: command tx timeout [ 91.151069][ T51] Bluetooth: hci3: command tx timeout [ 91.151086][ T5866] Bluetooth: hci2: command tx timeout [ 91.427662][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.467080][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.560614][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.578257][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.696003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.724476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.851804][ T5969] FAULT_INJECTION: forcing a failure. [ 91.851804][ T5969] name failslab, interval 1, probability 0, space 0, times 1 [ 91.870390][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.3.5 Not tainted syzkaller #0 PREEMPT(full) [ 91.870425][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.870460][ T5969] Call Trace: [ 91.870472][ T5969] [ 91.870483][ T5969] dump_stack_lvl+0x16c/0x1f0 [ 91.870526][ T5969] should_fail_ex+0x512/0x640 [ 91.870560][ T5969] ? __kvmalloc_node_noprof+0x124/0x620 [ 91.870590][ T5969] should_failslab+0xc2/0x120 [ 91.870609][ T5969] __kvmalloc_node_noprof+0x137/0x620 [ 91.870626][ T5969] ? v4l2_ctrl_new+0x97d/0x2180 [ 91.870644][ T5969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.870666][ T5969] ? v4l2_ctrl_new+0x97d/0x2180 [ 91.870684][ T5969] v4l2_ctrl_new+0x97d/0x2180 [ 91.870711][ T5969] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 91.870728][ T5969] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 91.870751][ T5969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.870782][ T5969] v4l2_ctrl_new_std+0x1be/0x290 [ 91.870808][ T5969] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 91.870826][ T5969] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 91.870848][ T5969] ? rcu_is_watching+0x12/0xc0 [ 91.870862][ T5969] ? trace_kmalloc+0x2b/0xd0 [ 91.870879][ T5969] ? __kvmalloc_node_noprof+0x298/0x620 [ 91.870898][ T5969] ? media_request_object_init+0x100/0x180 [ 91.870921][ T5969] vim2m_open+0x184/0x8a0 [ 91.870942][ T5969] v4l2_open+0x222/0x490 [ 91.870960][ T5969] ? __pfx_v4l2_open+0x10/0x10 [ 91.870975][ T5969] chrdev_open+0x234/0x6a0 [ 91.870992][ T5969] ? __pfx_apparmor_file_open+0x10/0x10 [ 91.871007][ T5969] ? __pfx_chrdev_open+0x10/0x10 [ 91.871025][ T5969] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 91.871044][ T5969] do_dentry_open+0x982/0x1530 [ 91.871061][ T5969] ? __pfx_chrdev_open+0x10/0x10 [ 91.871081][ T5969] vfs_open+0x82/0x3f0 [ 91.871103][ T5969] path_openat+0x1de4/0x2cb0 [ 91.871125][ T5969] ? __pfx_path_openat+0x10/0x10 [ 91.871146][ T5969] do_filp_open+0x20b/0x470 [ 91.871162][ T5969] ? __pfx_do_filp_open+0x10/0x10 [ 91.871191][ T5969] ? alloc_fd+0x471/0x7d0 [ 91.871211][ T5969] do_sys_openat2+0x11b/0x1d0 [ 91.871230][ T5969] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.871257][ T5969] __x64_sys_openat+0x174/0x210 [ 91.871277][ T5969] ? __pfx___x64_sys_openat+0x10/0x10 [ 91.871304][ T5969] do_syscall_64+0xcd/0x490 [ 91.871323][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.871337][ T5969] RIP: 0033:0x7f912f38ebe9 [ 91.871355][ T5969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.871372][ T5969] RSP: 002b:00007f913015f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.871386][ T5969] RAX: ffffffffffffffda RBX: 00007f912f5b5fa0 RCX: 00007f912f38ebe9 [ 91.871395][ T5969] RDX: 000000000010b000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 91.871404][ T5969] RBP: 00007f912f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 91.871412][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.871420][ T5969] R13: 00007f912f5b6038 R14: 00007f912f5b5fa0 R15: 00007ffc9a4e9a18 [ 91.871438][ T5969] [ 91.874357][ T1210] cfg80211: failed to load regulatory.db [ 92.295968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.370355][ T5973] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.953499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.962288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.015761][ T5980] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.067525][ T51] Bluetooth: hci0: command tx timeout [ 93.145990][ T51] Bluetooth: hci1: command tx timeout [ 93.225952][ T51] Bluetooth: hci3: command tx timeout [ 93.231416][ T51] Bluetooth: hci2: command tx timeout [ 93.261197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.316111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.465817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.725776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.977541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.071507][ T5995] ubi0: attaching mtd0 [ 94.145546][ T5995] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 95.361121][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.016866][ T6017] random: crng reseeded on system resumption [ 96.039390][ T6017] FAULT_INJECTION: forcing a failure. [ 96.039390][ T6017] name failslab, interval 1, probability 0, space 0, times 0 [ 96.070954][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 96.070977][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.070986][ T6017] Call Trace: [ 96.070992][ T6017] [ 96.070999][ T6017] dump_stack_lvl+0x16c/0x1f0 [ 96.071022][ T6017] should_fail_ex+0x512/0x640 [ 96.071043][ T6017] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 96.071061][ T6017] should_failslab+0xc2/0x120 [ 96.071080][ T6017] __kmalloc_cache_noprof+0x6a/0x3e0 [ 96.071094][ T6017] ? memory_bm_create+0x154/0x810 [ 96.071111][ T6017] memory_bm_create+0x154/0x810 [ 96.071132][ T6017] create_basic_memory_bitmaps+0xbd/0x320 [ 96.071151][ T6017] snapshot_open+0x235/0x2b0 [ 96.071167][ T6017] ? __pfx_snapshot_open+0x10/0x10 [ 96.071183][ T6017] misc_open+0x35a/0x420 [ 96.071199][ T6017] ? __pfx_misc_open+0x10/0x10 [ 96.071213][ T6017] chrdev_open+0x234/0x6a0 [ 96.071230][ T6017] ? __pfx_apparmor_file_open+0x10/0x10 [ 96.071246][ T6017] ? __pfx_chrdev_open+0x10/0x10 [ 96.071264][ T6017] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 96.071283][ T6017] do_dentry_open+0x982/0x1530 [ 96.071300][ T6017] ? __pfx_chrdev_open+0x10/0x10 [ 96.071320][ T6017] vfs_open+0x82/0x3f0 [ 96.071349][ T6017] path_openat+0x1de4/0x2cb0 [ 96.071373][ T6017] ? __pfx_path_openat+0x10/0x10 [ 96.071395][ T6017] do_filp_open+0x20b/0x470 [ 96.071411][ T6017] ? __pfx_do_filp_open+0x10/0x10 [ 96.071440][ T6017] ? alloc_fd+0x471/0x7d0 [ 96.071460][ T6017] do_sys_openat2+0x11b/0x1d0 [ 96.071480][ T6017] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.071507][ T6017] __x64_sys_openat+0x174/0x210 [ 96.071527][ T6017] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.071555][ T6017] do_syscall_64+0xcd/0x490 [ 96.071574][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.071588][ T6017] RIP: 0033:0x7f57f5d8ebe9 [ 96.071600][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.071613][ T6017] RSP: 002b:00007f57f6bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.071627][ T6017] RAX: ffffffffffffffda RBX: 00007f57f5fb5fa0 RCX: 00007f57f5d8ebe9 [ 96.071636][ T6017] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 96.071644][ T6017] RBP: 00007f57f5e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 96.071652][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.071660][ T6017] R13: 00007f57f5fb6038 R14: 00007f57f5fb5fa0 R15: 00007fffaa53b2c8 [ 96.071678][ T6017] [ 96.322926][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.715416][ T6028] FAULT_INJECTION: forcing a failure. [ 96.715416][ T6028] name failslab, interval 1, probability 0, space 0, times 0 [ 96.792771][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 96.792811][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.792828][ T6028] Call Trace: [ 96.792837][ T6028] [ 96.792848][ T6028] dump_stack_lvl+0x16c/0x1f0 [ 96.792891][ T6028] should_fail_ex+0x512/0x640 [ 96.792927][ T6028] ? __kmalloc_noprof+0xbf/0x510 [ 96.792960][ T6028] ? handler_new_ref+0x1b0/0xc60 [ 96.792995][ T6028] should_failslab+0xc2/0x120 [ 96.793030][ T6028] __kmalloc_noprof+0xd2/0x510 [ 96.793058][ T6028] ? __asan_memcpy+0x3c/0x60 [ 96.793092][ T6028] handler_new_ref+0x1b0/0xc60 [ 96.793138][ T6028] v4l2_ctrl_new+0x1963/0x2180 [ 96.793188][ T6028] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 96.793236][ T6028] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.793286][ T6028] v4l2_ctrl_new_std+0x1be/0x290 [ 96.793336][ T6028] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 96.793378][ T6028] ? rcu_is_watching+0x12/0xc0 [ 96.793406][ T6028] ? trace_kmalloc+0x2b/0xd0 [ 96.793439][ T6028] ? __kvmalloc_node_noprof+0x298/0x620 [ 96.793470][ T6028] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 96.793512][ T6028] ? media_request_object_init+0x100/0x180 [ 96.793558][ T6028] vim2m_open+0x160/0x8a0 [ 96.793598][ T6028] v4l2_open+0x222/0x490 [ 96.793631][ T6028] ? __pfx_v4l2_open+0x10/0x10 [ 96.793663][ T6028] chrdev_open+0x234/0x6a0 [ 96.793696][ T6028] ? __pfx_apparmor_file_open+0x10/0x10 [ 96.793726][ T6028] ? __pfx_chrdev_open+0x10/0x10 [ 96.793761][ T6028] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 96.793799][ T6028] do_dentry_open+0x982/0x1530 [ 96.793833][ T6028] ? __pfx_chrdev_open+0x10/0x10 [ 96.793874][ T6028] vfs_open+0x82/0x3f0 [ 96.793916][ T6028] path_openat+0x1de4/0x2cb0 [ 96.793960][ T6028] ? __pfx_path_openat+0x10/0x10 [ 96.794002][ T6028] do_filp_open+0x20b/0x470 [ 96.794034][ T6028] ? __pfx_do_filp_open+0x10/0x10 [ 96.794094][ T6028] ? alloc_fd+0x471/0x7d0 [ 96.794133][ T6028] do_sys_openat2+0x11b/0x1d0 [ 96.794171][ T6028] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.794224][ T6028] __x64_sys_openat+0x174/0x210 [ 96.794270][ T6028] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.794326][ T6028] do_syscall_64+0xcd/0x490 [ 96.794364][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.794391][ T6028] RIP: 0033:0x7f805b38ebe9 [ 96.794414][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.794439][ T6028] RSP: 002b:00007f805c1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.794466][ T6028] RAX: ffffffffffffffda RBX: 00007f805b5b5fa0 RCX: 00007f805b38ebe9 [ 96.794484][ T6028] RDX: 000000000010b000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 96.794502][ T6028] RBP: 00007f805b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 96.794518][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.794533][ T6028] R13: 00007f805b5b6038 R14: 00007f805b5b5fa0 R15: 00007fff281be368 [ 96.794565][ T6028] [ 97.088286][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.064117][ T6041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 99.800214][ T6078] zswap: compressor not available [ 100.946800][ T6104] FAULT_INJECTION: forcing a failure. [ 100.946800][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 101.035443][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) [ 101.035472][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.035481][ T6104] Call Trace: [ 101.035487][ T6104] [ 101.035493][ T6104] dump_stack_lvl+0x16c/0x1f0 [ 101.035516][ T6104] should_fail_ex+0x512/0x640 [ 101.035535][ T6104] ? __kvmalloc_node_noprof+0x124/0x620 [ 101.035553][ T6104] should_failslab+0xc2/0x120 [ 101.035572][ T6104] __kvmalloc_node_noprof+0x137/0x620 [ 101.035588][ T6104] ? v4l2_ctrl_new+0x97d/0x2180 [ 101.035606][ T6104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.035630][ T6104] ? v4l2_ctrl_new+0x97d/0x2180 [ 101.035648][ T6104] v4l2_ctrl_new+0x97d/0x2180 [ 101.035676][ T6104] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 101.035694][ T6104] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 101.035717][ T6104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.035737][ T6104] v4l2_ctrl_new_std+0x1be/0x290 [ 101.035762][ T6104] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 101.035780][ T6104] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 101.035800][ T6104] ? rcu_is_watching+0x12/0xc0 [ 101.035815][ T6104] ? trace_kmalloc+0x2b/0xd0 [ 101.035832][ T6104] ? __kvmalloc_node_noprof+0x298/0x620 [ 101.035851][ T6104] ? media_request_object_init+0x100/0x180 [ 101.035874][ T6104] vim2m_open+0x184/0x8a0 [ 101.035899][ T6104] v4l2_open+0x222/0x490 [ 101.035916][ T6104] ? __pfx_v4l2_open+0x10/0x10 [ 101.035939][ T6104] chrdev_open+0x234/0x6a0 [ 101.035957][ T6104] ? __pfx_apparmor_file_open+0x10/0x10 [ 101.035973][ T6104] ? __pfx_chrdev_open+0x10/0x10 [ 101.035991][ T6104] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 101.036010][ T6104] do_dentry_open+0x982/0x1530 [ 101.036033][ T6104] ? __pfx_chrdev_open+0x10/0x10 [ 101.036069][ T6104] vfs_open+0x82/0x3f0 [ 101.036105][ T6104] path_openat+0x1de4/0x2cb0 [ 101.036140][ T6104] ? __pfx_path_openat+0x10/0x10 [ 101.036161][ T6104] do_filp_open+0x20b/0x470 [ 101.036177][ T6104] ? __pfx_do_filp_open+0x10/0x10 [ 101.036206][ T6104] ? alloc_fd+0x471/0x7d0 [ 101.036226][ T6104] do_sys_openat2+0x11b/0x1d0 [ 101.036245][ T6104] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.036272][ T6104] __x64_sys_openat+0x174/0x210 [ 101.036292][ T6104] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.036319][ T6104] do_syscall_64+0xcd/0x490 [ 101.036339][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.036353][ T6104] RIP: 0033:0x7f4d3ef8ebe9 [ 101.036366][ T6104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.036379][ T6104] RSP: 002b:00007f4d3d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.036393][ T6104] RAX: ffffffffffffffda RBX: 00007f4d3f1b5fa0 RCX: 00007f4d3ef8ebe9 [ 101.036401][ T6104] RDX: 000000000010b000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 101.036410][ T6104] RBP: 00007f4d3f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 101.036418][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.036426][ T6104] R13: 00007f4d3f1b6038 R14: 00007f4d3f1b5fa0 R15: 00007fffc6ef3518 [ 101.036444][ T6104] [ 101.344463][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.367974][ T6097] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.540679][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 102.330438][ T6121] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 102.407194][ T6108] Bluetooth: hci0: no memory for command (opcode 0x0c1a) [ 102.438835][ T6108] Bluetooth: hci0: Opcode 0x0c1a failed: -12 [ 102.624591][ T6108] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.757155][ T6108] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.862300][ T6108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.875281][ T6108] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.947183][ T6108] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.956455][ T6122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 103.105158][ T6108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.135640][ T6108] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.164199][ T6108] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.333297][ T6108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.357255][ T6108] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.375210][ T6108] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.488830][ T6128] FAULT_INJECTION: forcing a failure. [ 103.488830][ T6128] name fail_futex, interval 1, probability 0, space 0, times 1 [ 103.502523][ T6128] CPU: 0 UID: 1 PID: 6128 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(full) [ 103.502543][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.502551][ T6128] Call Trace: [ 103.502556][ T6128] [ 103.502561][ T6128] dump_stack_lvl+0x16c/0x1f0 [ 103.502584][ T6128] should_fail_ex+0x512/0x640 [ 103.502607][ T6128] get_futex_key+0x1d0/0x1560 [ 103.502634][ T6128] ? __pfx_get_futex_key+0x10/0x10 [ 103.502657][ T6128] futex_wait_setup+0x9d/0x550 [ 103.502682][ T6128] __futex_wait+0x194/0x2f0 [ 103.502703][ T6128] ? __pfx___futex_wait+0x10/0x10 [ 103.502725][ T6128] ? __pfx_futex_wake_mark+0x10/0x10 [ 103.502747][ T6128] ? futex_private_hash_put+0x176/0x300 [ 103.502766][ T6128] ? futex_private_hash_put+0x18a/0x300 [ 103.502783][ T6128] futex_wait+0xe8/0x380 [ 103.502801][ T6128] ? __pfx_futex_wait+0x10/0x10 [ 103.502826][ T6128] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 103.502849][ T6128] do_futex+0x229/0x350 [ 103.502865][ T6128] ? __pfx_do_futex+0x10/0x10 [ 103.502887][ T6128] __x64_sys_futex+0x1e0/0x4c0 [ 103.502904][ T6128] ? __pfx___x64_sys_open_tree_attr+0x10/0x10 [ 103.502924][ T6128] ? __pfx___x64_sys_futex+0x10/0x10 [ 103.502940][ T6128] ? xfd_validate_state+0x61/0x180 [ 103.502958][ T6128] ? up_write+0x1b2/0x520 [ 103.502982][ T6128] do_syscall_64+0xcd/0x490 [ 103.503000][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.503014][ T6128] RIP: 0033:0x7f4d3ef8ebe9 [ 103.503026][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.503038][ T6128] RSP: 002b:00007f4d3d1d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.503051][ T6128] RAX: ffffffffffffffda RBX: 00007f4d3f1b6098 RCX: 00007f4d3ef8ebe9 [ 103.503060][ T6128] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d3f1b6098 [ 103.503068][ T6128] RBP: 00007f4d3f1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.503077][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.503084][ T6128] R13: 00007f4d3f1b6128 R14: 00007fffc6ef3430 R15: 00007fffc6ef3518 [ 103.503101][ T6128] [ 103.715284][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.506317][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 104.907049][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.933307][ T6155] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.047624][ T6119] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 105.146605][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.387961][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.082873][ T6165] random: crng reseeded on system resumption [ 106.587830][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 107.002339][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.048628][ T6184] Bluetooth: hci0: no memory for command (opcode 0x0c1a) [ 107.076754][ T6184] Bluetooth: hci0: Opcode 0x0c1a failed: -12 [ 107.093405][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'. [ 107.120240][ T6176] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 107.226685][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.393842][ T6181] team0: Port device team_slave_1 removed [ 107.466471][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.618213][ T6184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.618921][ T6184] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.619781][ T6184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.030126][ T6200] FAULT_INJECTION: forcing a failure. [ 108.030126][ T6200] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.114143][ T6200] CPU: 1 UID: 0 PID: 6200 Comm: syz.2.42 Not tainted syzkaller #0 PREEMPT(full) [ 108.114165][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.114174][ T6200] Call Trace: [ 108.114179][ T6200] [ 108.114190][ T6200] dump_stack_lvl+0x16c/0x1f0 [ 108.114213][ T6200] should_fail_ex+0x512/0x640 [ 108.114235][ T6200] get_futex_key+0x1d0/0x1560 [ 108.114255][ T6200] ? __pfx_get_futex_key+0x10/0x10 [ 108.114277][ T6200] futex_wait_setup+0x9d/0x550 [ 108.114301][ T6200] __futex_wait+0x194/0x2f0 [ 108.114321][ T6200] ? __pfx___futex_wait+0x10/0x10 [ 108.114343][ T6200] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.114365][ T6200] ? futex_private_hash_put+0x176/0x300 [ 108.114382][ T6200] ? futex_private_hash_put+0x18a/0x300 [ 108.114399][ T6200] futex_wait+0xe8/0x380 [ 108.114418][ T6200] ? __pfx_futex_wait+0x10/0x10 [ 108.114442][ T6200] ? ksys_write+0x190/0x250 [ 108.114461][ T6200] do_futex+0x229/0x350 [ 108.114477][ T6200] ? __pfx_do_futex+0x10/0x10 [ 108.114499][ T6200] __x64_sys_futex+0x1e0/0x4c0 [ 108.114516][ T6200] ? fput+0x9b/0xd0 [ 108.114533][ T6200] ? __pfx___x64_sys_futex+0x10/0x10 [ 108.114550][ T6200] ? xfd_validate_state+0x61/0x180 [ 108.114568][ T6200] ? __pfx_ksys_write+0x10/0x10 [ 108.114588][ T6200] do_syscall_64+0xcd/0x490 [ 108.114607][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.114620][ T6200] RIP: 0033:0x7f4d3ef8ebe9 [ 108.114632][ T6200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.114645][ T6200] RSP: 002b:00007f4d3d1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.114658][ T6200] RAX: ffffffffffffffda RBX: 00007f4d3f1b5fa8 RCX: 00007f4d3ef8ebe9 [ 108.114667][ T6200] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d3f1b5fa8 [ 108.114675][ T6200] RBP: 00007f4d3f1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 108.114683][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.114691][ T6200] R13: 00007f4d3f1b6038 R14: 00007fffc6ef3430 R15: 00007fffc6ef3518 [ 108.114708][ T6200] [ 108.467660][ T6196] netlink: 342 bytes leftover after parsing attributes in process `syz.0.41'. [ 109.145594][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.286043][ T6223] ICMPv6: process `syz.0.47' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 109.371407][ T6219] vivid-009: ================= START STATUS ================= [ 109.479871][ T6219] vivid-009: Enable Output Cropping: true grabbed [ 109.487669][ T6219] vivid-009: Enable Output Composing: true grabbed [ 109.494381][ T6219] vivid-009: Enable Output Scaler: true grabbed [ 109.502377][ T6219] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 109.510163][ T6219] vivid-009: Transmit Mode: HDMI grabbed [ 109.525639][ T6219] vivid-009: Hotplug Present: 0x00000000 [ 109.565393][ T6219] vivid-009: RxSense Present: 0x00000000 [ 109.625571][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.631675][ T5866] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.669567][ T6219] vivid-009: EDID Present: 0x00000000 [ 109.673748][ T6232] mmap: syz.0.47 (6232) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.709100][ T6219] vivid-009: ================== END STATUS ================== [ 111.179602][ T6262] FAULT_INJECTION: forcing a failure. [ 111.179602][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 111.221627][ T6268] netlink: 342 bytes leftover after parsing attributes in process `syz.0.53'. [ 111.256215][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 111.256248][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.256262][ T6262] Call Trace: [ 111.256271][ T6262] [ 111.256281][ T6262] dump_stack_lvl+0x16c/0x1f0 [ 111.256318][ T6262] should_fail_ex+0x512/0x640 [ 111.256352][ T6262] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 111.256388][ T6262] should_failslab+0xc2/0x120 [ 111.256420][ T6262] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 111.256451][ T6262] ? __d_alloc+0x32/0xae0 [ 111.256486][ T6262] __d_alloc+0x32/0xae0 [ 111.256526][ T6262] d_alloc_pseudo+0x1c/0xc0 [ 111.256562][ T6262] alloc_file_pseudo+0xcf/0x230 [ 111.256604][ T6262] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 111.256656][ T6262] __shmem_file_setup+0x1a3/0x330 [ 111.256684][ T6262] shmem_zero_setup+0x93/0x1a0 [ 111.256716][ T6262] __mmap_region+0x2081/0x27b0 [ 111.256748][ T6262] ? finish_task_switch.isra.0+0x21c/0xc10 [ 111.256776][ T6262] ? __pfx___mmap_region+0x10/0x10 [ 111.256803][ T6262] ? rcu_is_watching+0x12/0xc0 [ 111.256837][ T6262] ? rcu_is_watching+0x12/0xc0 [ 111.256861][ T6262] ? trace_sched_exit_tp+0xd1/0x120 [ 111.256896][ T6262] ? __schedule+0x11a3/0x5de0 [ 111.256923][ T6262] ? __lock_acquire+0x62e/0x1ce0 [ 111.256974][ T6262] ? __pfx___schedule+0x10/0x10 [ 111.257046][ T6262] ? trace_cap_capable+0x18d/0x200 [ 111.257086][ T6262] mmap_region+0x1ab/0x3f0 [ 111.257115][ T6262] ? __get_unmapped_area+0x267/0x440 [ 111.257154][ T6262] do_mmap+0xa3e/0x1210 [ 111.257195][ T6262] ? __pfx_do_mmap+0x10/0x10 [ 111.257229][ T6262] ? __pfx_down_write_killable+0x10/0x10 [ 111.257263][ T6262] ? __lock_acquire+0x62e/0x1ce0 [ 111.257299][ T6262] vm_mmap_pgoff+0x29e/0x470 [ 111.257341][ T6262] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 111.257384][ T6262] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.257412][ T6262] ? __x64_sys_futex+0x1e9/0x4c0 [ 111.257448][ T6262] ksys_mmap_pgoff+0x7d/0x5c0 [ 111.257480][ T6262] ? xfd_validate_state+0x61/0x180 [ 111.257520][ T6262] __x64_sys_mmap+0x125/0x190 [ 111.257561][ T6262] do_syscall_64+0xcd/0x490 [ 111.257596][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.257628][ T6262] RIP: 0033:0x7f57f5d8ebe9 [ 111.257648][ T6262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.257672][ T6262] RSP: 002b:00007f57f6bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 111.257702][ T6262] RAX: ffffffffffffffda RBX: 00007f57f5fb5fa0 RCX: 00007f57f5d8ebe9 [ 111.257719][ T6262] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 111.257734][ T6262] RBP: 00007f57f5e11e19 R08: fffffffffffffffa R09: 0000000000008000 [ 111.257750][ T6262] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 111.257765][ T6262] R13: 00007f57f5fb6038 R14: 00007f57f5fb5fa0 R15: 00007fffaa53b2c8 [ 111.257800][ T6262] [ 115.916422][ T6342] __vm_enough_memory: pid: 6342, comm: syz.3.68, bytes: 4398046511104 not enough memory for the allocation [ 116.150838][ T6349] Zero length message leads to an empty skb [ 116.567599][ T6349] random: crng reseeded on system resumption [ 116.853971][ T6359] can: request_module (can-proto-3) failed. [ 117.344264][ T6372] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[6372] [ 117.494324][ T6364] zswap: compressor not available [ 117.500691][ T6368] Setting dangerous option i915.mitigations - tainting kernel [ 118.513465][ T6386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.73'. [ 119.632982][ T6414] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.918250][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 120.053015][ T6388] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 123.294822][ T6473] sysfs_service_op_store: Client not running :-5: [ 123.302204][ T6455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.310015][ T6455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.316563][ T6455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.327346][ T6473] sysfs_service_op_store: Client not running :-5: [ 123.386222][ T6455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.892071][ T6484] vivid-007: ================= START STATUS ================= [ 123.900026][ T6484] vivid-007: ================== END STATUS ================== [ 124.825531][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 125.035647][ T6514] syz.2.101 uses obsolete (PF_INET,SOCK_PACKET) [ 125.397116][ T5866] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.397143][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.465387][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.216886][ T6518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.224937][ T6518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.238090][ T6518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.246844][ T6518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.304939][ T6536] netlink: 338 bytes leftover after parsing attributes in process `syz.1.104'. [ 127.750064][ T6567] random: crng reseeded on system resumption [ 127.805372][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 127.805637][ T5866] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 127.811391][ T5866] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 127.826212][ T5866] Bluetooth: hci2: Dropping invalid advertising data [ 127.833115][ T5866] Bluetooth: hci2: Dropping invalid advertising data [ 127.839865][ T5866] Bluetooth: hci2: Dropping invalid advertising data [ 127.846558][ T5866] Bluetooth: hci2: Malformed LE Event: 0x02 [ 128.278677][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.278686][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.278726][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.707860][ T6582] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.783130][ T6582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.838290][ T6582] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.865782][ T6582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.065335][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 131.755899][ T6630] netlink: 186 bytes leftover after parsing attributes in process `syz.3.126'. [ 131.785510][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.791144][ T6630] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 131.876727][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.955392][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.850512][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887105][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.447402][ T6659] netlink: 342 bytes leftover after parsing attributes in process `syz.0.131'. [ 133.461242][ T6655] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.860253][ T6647] Bluetooth: hci0: no memory for command (opcode 0x0c1a) [ 133.882759][ T6647] Bluetooth: hci0: Opcode 0x0c1a failed: -12 [ 133.916811][ T6647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.923692][ T6647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.929886][ T6647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.434681][ T6668] FAULT_INJECTION: forcing a failure. [ 134.434681][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 134.468294][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.3.133 Tainted: G U syzkaller #0 PREEMPT(full) [ 134.468337][ T6668] Tainted: [U]=USER [ 134.468346][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.468362][ T6668] Call Trace: [ 134.468378][ T6668] [ 134.468389][ T6668] dump_stack_lvl+0x16c/0x1f0 [ 134.468430][ T6668] should_fail_ex+0x512/0x640 [ 134.468465][ T6668] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 134.468501][ T6668] should_failslab+0xc2/0x120 [ 134.468535][ T6668] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 134.468569][ T6668] ? sock_alloc_inode+0x25/0x1c0 [ 134.468611][ T6668] ? __pfx_sock_alloc_inode+0x10/0x10 [ 134.468641][ T6668] sock_alloc_inode+0x25/0x1c0 [ 134.468676][ T6668] alloc_inode+0x64/0x240 [ 134.468711][ T6668] sock_alloc+0x40/0x280 [ 134.468748][ T6668] __sock_create+0xc1/0x8d0 [ 134.468778][ T6668] __sys_socket+0x14d/0x260 [ 134.468805][ T6668] ? __pfx___sys_socket+0x10/0x10 [ 134.468832][ T6668] ? xfd_validate_state+0x61/0x180 [ 134.468877][ T6668] __x64_sys_socket+0x72/0xb0 [ 134.468903][ T6668] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.468935][ T6668] do_syscall_64+0xcd/0x490 [ 134.468971][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.468998][ T6668] RIP: 0033:0x7f912f38ebe9 [ 134.469028][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.469052][ T6668] RSP: 002b:00007f913013e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 134.469076][ T6668] RAX: ffffffffffffffda RBX: 00007f912f5b6090 RCX: 00007f912f38ebe9 [ 134.469092][ T6668] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 134.469106][ T6668] RBP: 00007f912f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.469120][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.469133][ T6668] R13: 00007f912f5b6128 R14: 00007f912f5b6090 R15: 00007ffc9a4e9a18 [ 134.469167][ T6668] [ 134.469179][ T6668] socket: no more sockets [ 135.255560][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.723045][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.913064][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.945437][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.946798][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.160582][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.170121][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.177761][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.186229][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.193882][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.511333][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.604234][ T6678] syz.2.136 (6678) used greatest stack depth: 17768 bytes left [ 137.298033][ T61] bridge_slave_1: left allmulticast mode [ 137.350214][ T61] bridge_slave_1: left promiscuous mode [ 137.361922][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.422127][ T61] bridge_slave_0: left allmulticast mode [ 137.437364][ T61] bridge_slave_0: left promiscuous mode [ 137.450345][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.973771][ T6706] FAULT_INJECTION: forcing a failure. [ 137.973771][ T6706] name failslab, interval 1, probability 0, space 0, times 0 [ 137.986650][ T6706] CPU: 1 UID: 0 PID: 6706 Comm: syz.0.141 Tainted: G U syzkaller #0 PREEMPT(full) [ 137.986693][ T6706] Tainted: [U]=USER [ 137.986702][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.986717][ T6706] Call Trace: [ 137.986726][ T6706] [ 137.986737][ T6706] dump_stack_lvl+0x116/0x1f0 [ 137.986776][ T6706] should_fail_ex+0x512/0x640 [ 137.986819][ T6706] should_failslab+0xc2/0x120 [ 137.986855][ T6706] __kmalloc_cache_noprof+0x6a/0x3e0 [ 137.986884][ T6706] ? alloc_fw_cache_entry+0x3f/0xd0 [ 137.986915][ T6706] ? __pfx_fw_name_devm_release+0x10/0x10 [ 137.986946][ T6706] alloc_fw_cache_entry+0x3f/0xd0 [ 137.986976][ T6706] dev_create_fw_entry+0x3d/0x150 [ 137.987006][ T6706] ? __pfx_fw_name_devm_release+0x10/0x10 [ 137.987033][ T6706] devres_for_each_res+0x170/0x1d0 [ 137.987071][ T6706] ? __pfx_devm_name_match+0x10/0x10 [ 137.987108][ T6706] ? __pfx_dev_create_fw_entry+0x10/0x10 [ 137.987142][ T6706] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 137.987175][ T6706] dev_cache_fw_image+0xa2/0x490 [ 137.987210][ T6706] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 137.987248][ T6706] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 137.987279][ T6706] dpm_for_each_dev+0x5a/0xb0 [ 137.987308][ T6706] fw_pm_notify+0x81/0x150 [ 137.987334][ T6706] notifier_call_chain+0xb9/0x410 [ 137.987365][ T6706] ? __pfx_fw_pm_notify+0x10/0x10 [ 137.987402][ T6706] blocking_notifier_call_chain_robust+0xc8/0x160 [ 137.987447][ T6706] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 137.987493][ T6706] pm_notifier_call_chain_robust+0x27/0x60 [ 137.987526][ T6706] snapshot_open+0x189/0x2b0 [ 137.987556][ T6706] ? __pfx_snapshot_open+0x10/0x10 [ 137.987587][ T6706] misc_open+0x35a/0x420 [ 137.987616][ T6706] ? __pfx_misc_open+0x10/0x10 [ 137.987642][ T6706] chrdev_open+0x234/0x6a0 [ 137.987676][ T6706] ? __pfx_apparmor_file_open+0x10/0x10 [ 137.987705][ T6706] ? __pfx_chrdev_open+0x10/0x10 [ 137.987740][ T6706] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 137.987778][ T6706] do_dentry_open+0x982/0x1530 [ 137.987811][ T6706] ? __pfx_chrdev_open+0x10/0x10 [ 137.987852][ T6706] vfs_open+0x82/0x3f0 [ 137.987894][ T6706] path_openat+0x1de4/0x2cb0 [ 137.987939][ T6706] ? __pfx_path_openat+0x10/0x10 [ 137.987982][ T6706] do_filp_open+0x20b/0x470 [ 137.988015][ T6706] ? __pfx_do_filp_open+0x10/0x10 [ 137.988075][ T6706] ? alloc_fd+0x471/0x7d0 [ 137.988125][ T6706] do_sys_openat2+0x11b/0x1d0 [ 137.988164][ T6706] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.988220][ T6706] __x64_sys_openat+0x174/0x210 [ 137.988259][ T6706] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.988315][ T6706] do_syscall_64+0xcd/0x490 [ 137.988352][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.988380][ T6706] RIP: 0033:0x7f805b38ebe9 [ 137.988402][ T6706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.988428][ T6706] RSP: 002b:00007f805c1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.988452][ T6706] RAX: ffffffffffffffda RBX: 00007f805b5b5fa0 RCX: 00007f805b38ebe9 [ 137.988470][ T6706] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 137.988488][ T6706] RBP: 00007f805b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 137.988504][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.988519][ T6706] R13: 00007f805b5b6038 R14: 00007f805b5b5fa0 R15: 00007fff281be368 [ 137.988557][ T6706] [ 138.265401][ T51] Bluetooth: hci1: command tx timeout [ 139.171350][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.347211][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.420368][ T61] bond0 (unregistering): Released all slaves [ 139.690167][ T6706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.703728][ T6706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.720499][ T6706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.726862][ T6706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.733611][ T6706] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.007720][ T6706] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.492399][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 141.493478][ T6752] netlink: 13 bytes leftover after parsing attributes in process `syz.0.149'. [ 141.554477][ T61] hsr_slave_0: left promiscuous mode [ 141.566177][ T61] hsr_slave_1: left promiscuous mode [ 141.606000][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.643549][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.672633][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.685509][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.705707][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.705719][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 141.725120][ T61] veth1_macvtap: left promiscuous mode [ 141.730990][ T61] veth0_macvtap: left promiscuous mode [ 141.752613][ T61] veth1_vlan: left promiscuous mode [ 141.775578][ T61] veth0_vlan: left promiscuous mode [ 141.785822][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 141.785833][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.094926][ T61] team0 (unregistering): Port device team_slave_0 removed [ 143.408419][ T6771] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.624328][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.632749][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.658235][ T6687] bridge_slave_0: entered allmulticast mode [ 143.672907][ T6687] bridge_slave_0: entered promiscuous mode [ 143.683831][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.691191][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.698431][ T6687] bridge_slave_1: entered allmulticast mode [ 143.710620][ T6687] bridge_slave_1: entered promiscuous mode [ 143.866391][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 143.979168][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.041671][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.228469][ T6687] team0: Port device team_slave_0 added [ 144.322906][ T6687] team0: Port device team_slave_1 added [ 144.691471][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.723524][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.794143][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.083011][ T6797] FAULT_INJECTION: forcing a failure. [ 145.083011][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 145.096032][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.0.155 Tainted: G U syzkaller #0 PREEMPT(full) [ 145.096057][ T6797] Tainted: [U]=USER [ 145.096062][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.096070][ T6797] Call Trace: [ 145.096076][ T6797] [ 145.096082][ T6797] dump_stack_lvl+0x16c/0x1f0 [ 145.096105][ T6797] should_fail_ex+0x512/0x640 [ 145.096127][ T6797] should_failslab+0xc2/0x120 [ 145.096147][ T6797] __kmalloc_cache_noprof+0x6a/0x3e0 [ 145.096161][ T6797] ? do_raw_spin_lock+0x12c/0x2b0 [ 145.096182][ T6797] ? find_held_lock+0x2b/0x80 [ 145.096194][ T6797] ? async_schedule_node_domain+0x54/0x120 [ 145.096213][ T6797] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 145.096230][ T6797] async_schedule_node_domain+0x54/0x120 [ 145.096247][ T6797] dev_cache_fw_image+0x38e/0x490 [ 145.096264][ T6797] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 145.096283][ T6797] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 145.096299][ T6797] dpm_for_each_dev+0x5a/0xb0 [ 145.096314][ T6797] fw_pm_notify+0x81/0x150 [ 145.096328][ T6797] notifier_call_chain+0xb9/0x410 [ 145.096351][ T6797] ? __pfx_fw_pm_notify+0x10/0x10 [ 145.096370][ T6797] blocking_notifier_call_chain_robust+0xc8/0x160 [ 145.096390][ T6797] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 145.096416][ T6797] pm_notifier_call_chain_robust+0x27/0x60 [ 145.096435][ T6797] snapshot_open+0x189/0x2b0 [ 145.096451][ T6797] ? __pfx_snapshot_open+0x10/0x10 [ 145.096468][ T6797] misc_open+0x35a/0x420 [ 145.096483][ T6797] ? __pfx_misc_open+0x10/0x10 [ 145.096497][ T6797] chrdev_open+0x234/0x6a0 [ 145.096514][ T6797] ? __pfx_apparmor_file_open+0x10/0x10 [ 145.096535][ T6797] ? __pfx_chrdev_open+0x10/0x10 [ 145.096554][ T6797] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 145.096575][ T6797] do_dentry_open+0x982/0x1530 [ 145.096594][ T6797] ? __pfx_chrdev_open+0x10/0x10 [ 145.096618][ T6797] vfs_open+0x82/0x3f0 [ 145.096640][ T6797] path_openat+0x1de4/0x2cb0 [ 145.096663][ T6797] ? __pfx_path_openat+0x10/0x10 [ 145.096685][ T6797] do_filp_open+0x20b/0x470 [ 145.096701][ T6797] ? __pfx_do_filp_open+0x10/0x10 [ 145.096732][ T6797] ? alloc_fd+0x471/0x7d0 [ 145.096753][ T6797] do_sys_openat2+0x11b/0x1d0 [ 145.096775][ T6797] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.096804][ T6797] __x64_sys_openat+0x174/0x210 [ 145.096824][ T6797] ? __pfx___x64_sys_openat+0x10/0x10 [ 145.096853][ T6797] do_syscall_64+0xcd/0x490 [ 145.096873][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.096888][ T6797] RIP: 0033:0x7f805b38ebe9 [ 145.096900][ T6797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.096913][ T6797] RSP: 002b:00007f805c1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.096927][ T6797] RAX: ffffffffffffffda RBX: 00007f805b5b5fa0 RCX: 00007f805b38ebe9 [ 145.096937][ T6797] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 145.096946][ T6797] RBP: 00007f805b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 145.096955][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.096963][ T6797] R13: 00007f805b5b6038 R14: 00007f805b5b5fa0 R15: 00007fff281be368 [ 145.096983][ T6797] [ 145.098763][ T6797] [ 145.414745][ T6797] ====================================================== [ 145.421739][ T6797] WARNING: possible circular locking dependency detected [ 145.428735][ T6797] syzkaller #0 Tainted: G U [ 145.434696][ T6797] ------------------------------------------------------ [ 145.441687][ T6797] syz.0.155/6797 is trying to acquire lock: [ 145.447552][ T6797] ffff888060c96068 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7e0/0x23e0 [ 145.458144][ T6797] [ 145.458144][ T6797] but task is already holding lock: [ 145.465486][ T6797] ffffffff8f5173c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 145.474352][ T6797] [ 145.474352][ T6797] which lock already depends on the new lock. [ 145.474352][ T6797] [ 145.484732][ T6797] [ 145.484732][ T6797] the existing dependency chain (in reverse order) is: [ 145.493733][ T6797] [ 145.493733][ T6797] -> #4 (dpm_list_mtx){+.+.}-{4:4}: [ 145.501098][ T6797] __mutex_lock+0x193/0x1060 [ 145.506197][ T6797] device_pm_add+0x87/0x3e0 [ 145.511210][ T6797] device_add+0x9cd/0x1aa0 [ 145.516134][ T6797] device_create_groups_vargs+0x1f8/0x270 [ 145.522360][ T6797] device_create+0xed/0x130 [ 145.527387][ T6797] msr_device_create+0x31/0x70 [ 145.532652][ T6797] cpuhp_invoke_callback+0x3d5/0xa10 [ 145.538439][ T6797] cpuhp_thread_fun+0x47e/0x6f0 [ 145.543792][ T6797] smpboot_thread_fn+0x3f7/0xae0 [ 145.549228][ T6797] kthread+0x3c5/0x780 [ 145.553800][ T6797] ret_from_fork+0x5d4/0x6f0 [ 145.558893][ T6797] ret_from_fork_asm+0x1a/0x30 [ 145.564158][ T6797] [ 145.564158][ T6797] -> #3 (cpuhp_state-up){+.+.}-{0:0}: [ 145.571689][ T6797] cpuhp_thread_fun+0x193/0x6f0 [ 145.577053][ T6797] smpboot_thread_fn+0x3f7/0xae0 [ 145.582490][ T6797] kthread+0x3c5/0x780 [ 145.587062][ T6797] ret_from_fork+0x5d4/0x6f0 [ 145.592160][ T6797] ret_from_fork_asm+0x1a/0x30 [ 145.597428][ T6797] [ 145.597428][ T6797] -> #2 (cpu_hotplug_lock){++++}-{0:0}: [ 145.605135][ T6797] cpus_read_lock+0x42/0x160 [ 145.610226][ T6797] ring_buffer_resize+0x105/0x15c0 [ 145.615841][ T6797] tracing_update_buffers+0x15e/0x1f0 [ 145.621804][ T6797] ftrace_event_write+0x14a/0x2c0 [ 145.627326][ T6797] vfs_write+0x2a0/0x11d0 [ 145.632163][ T6797] ksys_write+0x12a/0x250 [ 145.636991][ T6797] do_syscall_64+0xcd/0x490 [ 145.641998][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.648388][ T6797] [ 145.648388][ T6797] -> #1 (trace_types_lock){+.+.}-{4:4}: [ 145.656095][ T6797] __mutex_lock+0x193/0x1060 [ 145.661186][ T6797] tracing_check_open_get_tr.part.0+0x49/0x190 [ 145.667906][ T6797] tracing_open_generic_tr+0x66/0xf0 [ 145.673715][ T6797] do_dentry_open+0x982/0x1530 [ 145.679000][ T6797] vfs_open+0x82/0x3f0 [ 145.683576][ T6797] dentry_open+0x71/0xd0 [ 145.688327][ T6797] ima_calc_file_hash+0x2b6/0x490 [ 145.693855][ T6797] ima_collect_measurement+0x899/0xa40 [ 145.699823][ T6797] process_measurement+0x11fa/0x23e0 [ 145.705616][ T6797] ima_file_check+0xc5/0x110 [ 145.710705][ T6797] security_file_post_open+0x8e/0x210 [ 145.716580][ T6797] path_openat+0x1404/0x2cb0 [ 145.721680][ T6797] do_filp_open+0x20b/0x470 [ 145.726682][ T6797] do_sys_openat2+0x11b/0x1d0 [ 145.731864][ T6797] __x64_sys_openat+0x174/0x210 [ 145.737220][ T6797] do_syscall_64+0xcd/0x490 [ 145.742230][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.748621][ T6797] [ 145.748621][ T6797] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 145.757198][ T6797] __lock_acquire+0x12a6/0x1ce0 [ 145.762552][ T6797] lock_acquire+0x179/0x350 [ 145.767555][ T6797] __mutex_lock+0x193/0x1060 [ 145.772645][ T6797] process_measurement+0x7e0/0x23e0 [ 145.778347][ T6797] ima_file_check+0xc5/0x110 [ 145.783437][ T6797] security_file_post_open+0x8e/0x210 [ 145.789334][ T6797] path_openat+0x1404/0x2cb0 [ 145.794433][ T6797] do_file_open_root+0x322/0x610 [ 145.799875][ T6797] file_open_root+0x2a7/0x450 [ 145.805065][ T6797] kernel_read_file_from_path_initns+0x189/0x260 [ 145.811895][ T6797] _request_firmware+0x744/0x1470 [ 145.817431][ T6797] __async_dev_cache_fw_image+0xb1/0x340 [ 145.823651][ T6797] async_schedule_node_domain+0xd4/0x120 [ 145.829787][ T6797] dev_cache_fw_image+0x38e/0x490 [ 145.835312][ T6797] dpm_for_each_dev+0x5a/0xb0 [ 145.840487][ T6797] fw_pm_notify+0x81/0x150 [ 145.845406][ T6797] notifier_call_chain+0xb9/0x410 [ 145.850933][ T6797] blocking_notifier_call_chain_robust+0xc8/0x160 [ 145.857860][ T6797] pm_notifier_call_chain_robust+0x27/0x60 [ 145.864186][ T6797] snapshot_open+0x189/0x2b0 [ 145.869276][ T6797] misc_open+0x35a/0x420 [ 145.874016][ T6797] chrdev_open+0x234/0x6a0 [ 145.878932][ T6797] do_dentry_open+0x982/0x1530 [ 145.884198][ T6797] vfs_open+0x82/0x3f0 [ 145.888768][ T6797] path_openat+0x1de4/0x2cb0 [ 145.893865][ T6797] do_filp_open+0x20b/0x470 [ 145.898878][ T6797] do_sys_openat2+0x11b/0x1d0 [ 145.904069][ T6797] __x64_sys_openat+0x174/0x210 [ 145.909431][ T6797] do_syscall_64+0xcd/0x490 [ 145.914438][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.920830][ T6797] [ 145.920830][ T6797] other info that might help us debug this: [ 145.920830][ T6797] [ 145.931037][ T6797] Chain exists of: [ 145.931037][ T6797] &ima_iint_mutex_key[depth] --> cpuhp_state-up --> dpm_list_mtx [ 145.931037][ T6797] [ 145.944656][ T6797] Possible unsafe locking scenario: [ 145.944656][ T6797] [ 145.952084][ T6797] CPU0 CPU1 [ 145.957425][ T6797] ---- ---- [ 145.962764][ T6797] lock(dpm_list_mtx); [ 145.966898][ T6797] lock(cpuhp_state-up); [ 145.973727][ T6797] lock(dpm_list_mtx); [ 145.980395][ T6797] lock(&ima_iint_mutex_key[depth]); [ 145.985751][ T6797] [ 145.985751][ T6797] *** DEADLOCK *** [ 145.985751][ T6797] [ 145.993873][ T6797] 5 locks held by syz.0.155/6797: [ 145.998875][ T6797] #0: ffffffff8f306f48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 146.007303][ T6797] #1: ffffffff8e484808 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 146.017638][ T6797] #2: ffffffff8e4c4c70 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 146.029449][ T6797] #3: ffffffff8f51c9c8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 146.038042][ T6797] #4: ffffffff8f5173c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 146.047345][ T6797] [ 146.047345][ T6797] stack backtrace: [ 146.053214][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.0.155 Tainted: G U syzkaller #0 PREEMPT(full) [ 146.053234][ T6797] Tainted: [U]=USER [ 146.053239][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.053247][ T6797] Call Trace: [ 146.053254][ T6797] [ 146.053260][ T6797] dump_stack_lvl+0x116/0x1f0 [ 146.053280][ T6797] print_circular_bug+0x275/0x350 [ 146.053304][ T6797] check_noncircular+0x14c/0x170 [ 146.053322][ T6797] __lock_acquire+0x12a6/0x1ce0 [ 146.053342][ T6797] lock_acquire+0x179/0x350 [ 146.053359][ T6797] ? process_measurement+0x7e0/0x23e0 [ 146.053374][ T6797] ? __pfx___might_resched+0x10/0x10 [ 146.053390][ T6797] ? process_measurement+0x7e0/0x23e0 [ 146.053403][ T6797] __mutex_lock+0x193/0x1060 [ 146.053420][ T6797] ? process_measurement+0x7e0/0x23e0 [ 146.053436][ T6797] ? __pfx___mutex_lock+0x10/0x10 [ 146.053458][ T6797] ? __pfx___might_resched+0x10/0x10 [ 146.053472][ T6797] ? find_held_lock+0x2b/0x80 [ 146.053486][ T6797] ? down_write+0x14d/0x200 [ 146.053509][ T6797] ? process_measurement+0x7e0/0x23e0 [ 146.053522][ T6797] process_measurement+0x7e0/0x23e0 [ 146.053543][ T6797] ? __pfx_process_measurement+0x10/0x10 [ 146.053566][ T6797] ? find_held_lock+0x2b/0x80 [ 146.053584][ T6797] ? fscrypt_file_open+0x47c/0x590 [ 146.053610][ T6797] ? __pfx___fsnotify_parent+0x10/0x10 [ 146.053623][ T6797] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 146.053640][ T6797] ima_file_check+0xc5/0x110 [ 146.053654][ T6797] ? __pfx_ima_file_check+0x10/0x10 [ 146.053668][ T6797] ? vfs_open+0x2e3/0x3f0 [ 146.053687][ T6797] security_file_post_open+0x8e/0x210 [ 146.053706][ T6797] path_openat+0x1404/0x2cb0 [ 146.053723][ T6797] ? trace_kmem_cache_alloc+0x28/0xc0 [ 146.053748][ T6797] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 146.053765][ T6797] ? __pfx_path_openat+0x10/0x10 [ 146.053780][ T6797] ? __asan_memcpy+0x3c/0x60 [ 146.053795][ T6797] do_file_open_root+0x322/0x610 [ 146.053812][ T6797] ? __pfx_do_file_open_root+0x10/0x10 [ 146.053835][ T6797] ? vsnprintf+0x318/0x1160 [ 146.053852][ T6797] file_open_root+0x2a7/0x450 [ 146.053868][ T6797] ? __pfx_file_open_root+0x10/0x10 [ 146.053884][ T6797] ? find_held_lock+0x2b/0x80 [ 146.053896][ T6797] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 146.053918][ T6797] kernel_read_file_from_path_initns+0x189/0x260 [ 146.053939][ T6797] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 146.053958][ T6797] ? trace_kmem_cache_alloc+0x28/0xc0 [ 146.053978][ T6797] ? _request_firmware+0x503/0x1470 [ 146.053995][ T6797] _request_firmware+0x744/0x1470 [ 146.054013][ T6797] ? __pfx__request_firmware+0x10/0x10 [ 146.054029][ T6797] ? dump_stack_lvl+0x185/0x1f0 [ 146.054045][ T6797] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.054063][ T6797] __async_dev_cache_fw_image+0xb1/0x340 [ 146.054080][ T6797] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 146.054098][ T6797] ? mark_held_locks+0x49/0x80 [ 146.054113][ T6797] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 146.054130][ T6797] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 146.054147][ T6797] async_schedule_node_domain+0xd4/0x120 [ 146.054164][ T6797] dev_cache_fw_image+0x38e/0x490 [ 146.054179][ T6797] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 146.054196][ T6797] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 146.054211][ T6797] dpm_for_each_dev+0x5a/0xb0 [ 146.054225][ T6797] fw_pm_notify+0x81/0x150 [ 146.054239][ T6797] notifier_call_chain+0xb9/0x410 [ 146.054256][ T6797] ? __pfx_fw_pm_notify+0x10/0x10 [ 146.054271][ T6797] blocking_notifier_call_chain_robust+0xc8/0x160 [ 146.054294][ T6797] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 146.054315][ T6797] pm_notifier_call_chain_robust+0x27/0x60 [ 146.054333][ T6797] snapshot_open+0x189/0x2b0 [ 146.054349][ T6797] ? __pfx_snapshot_open+0x10/0x10 [ 146.054364][ T6797] misc_open+0x35a/0x420 [ 146.054379][ T6797] ? __pfx_misc_open+0x10/0x10 [ 146.054392][ T6797] chrdev_open+0x234/0x6a0 [ 146.054409][ T6797] ? __pfx_apparmor_file_open+0x10/0x10 [ 146.054424][ T6797] ? __pfx_chrdev_open+0x10/0x10 [ 146.054441][ T6797] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 146.054457][ T6797] do_dentry_open+0x982/0x1530 [ 146.054474][ T6797] ? __pfx_chrdev_open+0x10/0x10 [ 146.054492][ T6797] vfs_open+0x82/0x3f0 [ 146.054511][ T6797] path_openat+0x1de4/0x2cb0 [ 146.054529][ T6797] ? __pfx_path_openat+0x10/0x10 [ 146.054548][ T6797] do_filp_open+0x20b/0x470 [ 146.054564][ T6797] ? __pfx_do_filp_open+0x10/0x10 [ 146.054584][ T6797] ? alloc_fd+0x471/0x7d0 [ 146.054600][ T6797] do_sys_openat2+0x11b/0x1d0 [ 146.054619][ T6797] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.054642][ T6797] __x64_sys_openat+0x174/0x210 [ 146.054662][ T6797] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.054685][ T6797] do_syscall_64+0xcd/0x490 [ 146.054704][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.054718][ T6797] RIP: 0033:0x7f805b38ebe9 [ 146.054730][ T6797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.054743][ T6797] RSP: 002b:00007f805c1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.054756][ T6797] RAX: ffffffffffffffda RBX: 00007f805b5b5fa0 RCX: 00007f805b38ebe9 [ 146.054766][ T6797] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 146.054775][ T6797] RBP: 00007f805b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 146.054783][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.054791][ T6797] R13: 00007f805b5b6038 R14: 00007f805b5b5fa0 R15: 00007fff281be368 [ 146.054804][ T6797] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.690130][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 148.745400][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 150.825551][ T51] Bluetooth: hci1: command 0x040f tx timeout