last executing test programs: 10.325097174s ago: executing program 0 (id=287): unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101901, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video34\x00', 0x40861, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240, 0x13) statx$auto(r1, &(0x7f0000004b00)='\x00', 0xbf02, 0x3, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x1, 0x0) pwrite64$auto(r2, &(0x7f0000000100)='/dev/sda1\x00', 0xe, 0x7) r3 = socket(0x2b, 0x1, 0x0) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer1\x00', 0x500, 0x0) ioctl$auto_SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f00000004c0)) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x545b, 0xffffffffffffffff) mmap$auto(0x0, 0x8c8e, 0x401, 0xffffffffffffffff, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 9.346769764s ago: executing program 0 (id=296): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async, rerun: 32) socket(0x10, 0x3, 0x6) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0x1}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) write$auto(0x3, 0x0, 0x100082) (async) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) read$auto(r0, 0x0, 0x7) (async, rerun: 32) socket(0xa, 0x5, 0x3a) (async, rerun: 32) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000a00)=0x101) (async, rerun: 64) setsockopt$auto(r1, 0x29, 0x3e, 0x0, 0x1ff) (async, rerun: 64) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) (async) fcntl$auto_F_SETFD(r1, 0x2, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xbfffffffffff0006, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) setns$auto(0x0, 0xb) 7.95134212s ago: executing program 0 (id=300): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1a, 0x4, 0x8000) unshare$auto(0x40000080) unshare$auto(0x21) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r0, 0x0) io_uring_setup$auto(0x23, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl$auto(r1, 0x8941, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x17) listmount$auto(0x0, 0x0, 0x4, 0x101) init_module$auto(0x0, 0xffff9, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x83, 0x21, 0x0, 0x0) 5.659209643s ago: executing program 0 (id=311): madvise$auto(0x4, 0x8000000000000002, 0xc) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) move_pages$auto(0x1, 0x545, 0x0, 0x0, 0x0, 0x8049) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x331101, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) (async) socket(0x1d, 0x4, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) prctl$auto(0x3e, 0x18, 0x0, 0x1, 0x0) (rerun: 32) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/misc/iommu/uevent\x00', 0xc2481, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0x8) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0xc}, 0x1) (async, rerun: 64) r3 = socket(0x5, 0x2, 0x801) (async, rerun: 64) mmap$auto(0x0, 0x8000, 0x374, 0xeb1, 0x401, 0x8000) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5403, 0x0) connect$auto(r3, 0x0, 0x3a) (async) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x7ffffffd) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0) (async, rerun: 64) preadv2$auto(r3, &(0x7f00000001c0)={0x0, 0x80000000}, 0x96b0, 0x3, 0x8, 0x2e) (async, rerun: 64) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) (async) syz_clone(0x6050000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.824563972s ago: executing program 0 (id=314): mmap$auto(0x80000000000000, 0x80000001, 0x3, 0x40000eb1, 0xfffffffffffffffa, 0x7ffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp1\x00'}) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000ec0), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET2(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000c80)="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", 0x300) getsockopt$auto_SO_TXTIME(r4, 0x8, 0x3d, &(0x7f0000000080)='\\\x00', &(0x7f00000000c0)=0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9b600000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2504000000d000"], 0xe4}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048006) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r5, 0xe5a, 0x5) utimes$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x8, 0x8001}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/rxrpc/peers\x00', 0x0, 0x0) pread64$auto(r6, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) 4.254865632s ago: executing program 3 (id=318): openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) socket(0x11, 0x80003, 0x300) r0 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000180)="e9fa", 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140) mmap$auto(0x5d3, 0x810004, 0x400000000ffb, 0x8000000008011, 0xffffffffffffffff, 0xc) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) iopl$auto(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 3.201743215s ago: executing program 3 (id=321): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) bind$auto(0x3, 0x0, 0x6b) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x3, 0x0) connect$auto(0x3, 0x0, 0x6b) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000884}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r3, 0x4020565a, r2) 3.15915275s ago: executing program 1 (id=322): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04d55a472500"/22], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) (async) listen$auto(0x3, 0x81) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0x7fffffff, 0x7, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) r1 = socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfdef) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r1, 0x2000000000006) (async) timer_create$auto(0x3, 0x0, 0x0) (async) timer_settime$auto(0x0, 0x3, &(0x7f00000003c0)={{}, {0x0, 0x97}}, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r2, 0x405c5503, 0x81) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 3.133808148s ago: executing program 2 (id=323): statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x8000, 0x2, 0x9, 0x6, 0x400001, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x2d7d01bf, 0x107, 0x2000, 0x7, 0x0, 0x9, 0x6ef, 0xfffffffc, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x4, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x400000000000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x35, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1000]}, 0x1fe, 0x533) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r0, 0x814}, 0x0) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0) ioctl$auto_FITHAW(r1, 0xc0045878, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) unshare$auto(0x40000080) socket(0x27, 0x5, 0x80) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x69a}) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) socketpair$auto(0x9, 0x10, 0x5, &(0x7f0000000540)=0x80) socket(0x10, 0x2, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80800, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffdffd}, 0x6, 0x400000000000008, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) epoll_create$auto(0x8ca0d1a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(r4, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') utime$auto(0x0, &(0x7f00000003c0)={0xffff, 0xd73}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000300)='j\xc27\b\\\xa1\xe9v*\xb6]ax\x04\xa9O\xb7\x1f\xae\ri\x1e\xe2\x12\x93\xd5\xe1\x17k`\b\xe6H\xd5\xc3\x05o1\xac,\xe0\xfd\xcc*\xb0g\xa6\x93\xd9\xf64d\xf3\xeb\x0ff\xea^\xf9\xc3\xb8\xc0_\xde\x1dE\xae\x82#\x00\x96\xa6w\xf4\xf1\xdd\xd4\xb1\xcez+c\xe4\x98\x1cLWl\xb6$\x1f\xd1\xec\x1dc\x90t%\xd3\x16E\xe2@8\xcfgT\xcb\xdb\xd3', 0xb) 2.746821183s ago: executing program 1 (id=324): r0 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000000)=0x8) setsockopt$auto(r0, 0x8, 0x3, &(0x7f0000000080)='E\x00', 0xe000000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x3, 0x5, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/workqueue/nf_ft_offload_del/nice\x00', 0x4aaa2, 0x0) pwrite64$auto(r2, &(0x7f0000000140)='-h\xd2i>\xcef1\xdeF\t\x85^!D\n\xf4~\xc8\xdc\xa5\x94\xc5K=\xaa!\xd9-evO+\xdd\xce!\x8cE\x04\t\xf8\x00\f\xe6\xba\n\xfe\xc5?\a\xa7\x1b\x0e\x13\xa8\xba\x10\xd9\x9b\f\xc9\xc8~\xfb\xd8\x92\x10\x8d\x93f\x836/\xee\xf5\x10\xf3rk\xc1^$\x91\x84\xe3\xa8{+ui\xa7O*\xdd=\xfdr\xb9\t\x005\x00\x00\xbf\x1feX*J\xeb\xf6\xc4\n\xce\xf0\xf4\xc4\xce\xc2=I\\8,\xf4\x9a\x17\xc3t;E\x146\xc3!\x9e\x05\x05\x84\x1f\xe4\x06', 0x80080005, 0x1000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(r1, 0x10000000084, 0x23, 0x0, 0x8) 2.442109107s ago: executing program 1 (id=325): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x10000400) write$auto(0xffffffffffffffff, 0x0, 0x80000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x4, 0x20009, 0x8, 0xeb1, 0x6, 0x2000000008) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x121600, 0x0) (async) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x121600, 0x0) ioctl$auto_CEC_RECEIVE(r1, 0xc0386106, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x468c0, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x15, r2, 0x701cf82a) (async) mmap$auto(0x1002, 0x9, 0x4, 0x15, r2, 0x701cf82a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22b42, 0x0) sendfile$auto(r3, r3, 0x0, 0x6) (async) sendfile$auto(r3, r3, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x101041, 0x0) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000440)="671f264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532", 0x1a) socket(0x10, 0x3, 0x6) 2.228100482s ago: executing program 3 (id=326): socket(0xa, 0x1, 0x100) r0 = eventfd2$auto(0x6af3, 0x800) readv$auto(r0, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) read$auto_fops_u8_(r0, &(0x7f0000001e40)=""/109, 0x6d) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) 2.088003462s ago: executing program 2 (id=327): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x4181, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000040)={0x6, [0x3fb, 0x5, 0x9], [{0x2, 0x8000, 0x1, 0x1, 0x1}, {0x573, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x6, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x100, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x36}, {0x1, 0x9, 0x1, 0x0, 0x1}, {0x8000, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x75d1}, {0x5, 0x10001, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x10001}, {0x10000, 0x1, 0x1}], 0x2, 0x6, 0x101, 0x8, 0x8, 0x7fffffff, 0x5, "f9f2185ab424de2152f8251ab2df7c75a60aaf616375532f7e2648047bd7cb2ee55a1bc8d68a1d7d435a09d9e4244d716dbe7f1e5dd8e532c3296f17af341675"}) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x64000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/92, 0x5c) pwritev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000200)="c61c98043acbfb3e3717ebe6be78226a2a2d91b6b281af9b94583e3617a04a08d20a9007844d185d23a53185767c0a17375f963ff0c477badd749cc1905ba40b6cc89ff5c7571227c0b9ab2ce9e628ae15614f6a29f51fb7d10518c0739c351041961aaa15e9b7e982548eba57027fa2b9dd0681eeaf01f915d61d2aaf720562fd1535e8f283c568e86b82947e1aa2d3321e773200bf6fc7923400df0a04d4ab26884a57ff89777f9b2fed7a8cd017a3ee932f4a6ef4", 0x80000000}, 0x7, 0x0, 0x3) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0xa) (async) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/security/tomoyo/audit\x00', 0x101000, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000380)="c7e63e10b5319cc191b235ade84e7fb179cba0a7fb6ce852da13e89f317880043f478d46d29d977e444fcdeb0ff647a3cbc4446d797920e04fff73d4689ee3e0bbb7d8e83cd6e3129ad8dc8d55f017e1682cca414a621888df6c2f8f4f4437", 0x5f) select$auto(0x3, &(0x7f0000000400)={[0x223, 0xffffffffffff2fd6, 0x6, 0x5, 0x4, 0xffffffffffffffff, 0x80000000, 0x80, 0x100000001, 0x3ff, 0x9, 0x0, 0xbff, 0x4, 0x100, 0xf]}, &(0x7f0000000480)={[0x2, 0xc000, 0x8, 0x2, 0xfff, 0x800, 0x8001, 0x7fff, 0x0, 0x2, 0xff, 0xc2de, 0x5, 0x6, 0x7, 0x101]}, &(0x7f0000000500)={[0x9, 0x0, 0x1, 0x6, 0x400, 0x200, 0x5, 0x7, 0x1797de42, 0xd, 0x13, 0x6, 0x428c, 0x4, 0x7701889, 0x9]}, &(0x7f0000000580)={0x7c, 0x5}) (async, rerun: 32) setsockopt$auto_SO_NO_CHECK(r1, 0xfffffffc, 0xb, &(0x7f00000005c0)='\x00', 0xe12e) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000640), r2) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x1}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x4044) (async) read$auto_ima_htable_violations_ops_ima_fs(r2, &(0x7f0000000740)=""/13, 0xd) (async) utimes$auto(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x3}) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000840), r2) sendmsg$auto_OVS_METER_CMD_GET(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0xf}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) r6 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000940)='ns/uts\x00') readv$auto(r1, &(0x7f00000009c0)={&(0x7f0000000980)="4fa8d2fca196f0abae8eed74dc9dc06b6dc85ba12d67870cb5ebd679f57e0900113868aa010decbad57af19a43841265d85b12d6231932f3250c112988", 0x4}, 0xc0) (async) r7 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/ieee80211/phy9/ht40allow_map\x00', 0x42080, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/devices/platform/vhci_hcd.9/usb28/bDeviceProtocol\x00', 0x101000, 0x0) ioctl$auto_XFS_IOC_FREESP64(r7, 0x40305825, &(0x7f0000000a80)={0x3, 0x767, 0x3, 0x3fe000000, 0xffffdf66, r6}) (async) shutdown$auto(r1, 0x5) (async, rerun: 64) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000ac0)={@sival_int=0x36fd, @inferred=r0, 0x2, @_tid=r6}, &(0x7f0000000b00)=0x7) (rerun: 64) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000b40)={0x7f, 0x7, 0xf618, 0x7, 0x8, "9548faa8f4c54469573dd3acd67d8dad5b6ccce43cd76474ac568e16e056d434522660c462de7882b6cfb168449a25c467911a82a393cef7bad40447"}) (async) r9 = io_uring_setup$auto(0x6, &(0x7f0000000bc0)={0x39, 0x5, 0x4, 0x2, 0x7, 0xfd9, r0, [0x8, 0x7, 0x5], {0x79ad5, 0x8, 0x2, 0x8, 0x7ff, 0x6, 0x8, 0x6, 0x5}, {0x0, 0x9, 0x5, 0x1, 0x0, 0xffffffff, 0x1, 0x0, 0xfffffffffffffff8}}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000c40), r9) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), r2) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r10, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x22, 0xbd, "d71a850941c6ab9d32490ed6d5eb1c386670d0e8bda34de6cd310e382584"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x400c08d) (async) close_range$auto(r9, r7, 0xffff) 2.038144693s ago: executing program 3 (id=328): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x4000df, 0x974, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x18ac1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x8000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x3f1) (async) getdents$auto(r1, 0x0, 0x3f1) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) msgctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000000240)={{0xffffff01, 0xee01, 0xee01, 0x4, 0x3d6, 0xab, 0x3}, &(0x7f0000000080)=0xf6, &(0x7f0000000100)=0x1, 0x7, 0x7f, 0x1, 0x6, 0x3, 0x0, 0x8, 0x438, @raw=0x7, @raw=0xb}) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0x100000001, 0x9, r2, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xffffffffffff59de, 0x2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109040, 0x0) (async) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109040, 0x0) ioctl$auto_FS_IOC_RESVSP(r4, 0x40305828, 0x4) (async) ioctl$auto_FS_IOC_RESVSP(r4, 0x40305828, 0x4) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) getdents$auto(r1, 0x0, 0xa2b0) (async) getdents$auto(r1, 0x0, 0xa2b0) close_range$auto(0x2, 0x8, 0x0) 1.848544729s ago: executing program 2 (id=329): membarrier$auto(0x7, 0x9, 0xffff) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) 1.6467344s ago: executing program 2 (id=330): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) (async) mmap$auto(0x0, 0x7, 0x2, 0x19, r0, 0x300000000000) r1 = getpid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) getresgid$auto(&(0x7f0000000080)=0x4, 0x0, 0x0) (async, rerun: 32) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x4) madvise$auto(0x2, 0x1, 0x1ff) (async, rerun: 64) ioctl$auto(0x3, 0x400454ca, 0x38) (async, rerun: 64) uname$auto(0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0xffd8) (rerun: 64) 1.50240517s ago: executing program 0 (id=331): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x4a4c02, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ff"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x8, 0xe27c, 0x8) socket(0xf, 0xa, 0xd13) writev$auto(r0, &(0x7f00000002c0)={0x0, 0xfffffffffff7ffff}, 0x9) r2 = socket(0x2b, 0x1, 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r4, 0x9, 0x0) getdents$auto(r4, 0x0, 0x62d4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) munmap$auto(0x400000008000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, r1, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000280), 0x7fc31fac0f0c1f4e, 0x0) ioctl$auto_RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000000c0)={0x1, 0x61, {0x9, 0x3, 0xd43, 0x7, 0x200, 0x290, 0x10000000, 0x2000003a, 0x7}}) 1.431659992s ago: executing program 2 (id=332): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0x15) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x5, 0x8c2, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya7\x00', 0x169701, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(0x0, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) 1.380972112s ago: executing program 1 (id=333): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0xa, 0x300) recvmmsg$auto(r0, 0x0, 0x9, 0x22, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x8, &(0x7f00000000c0)={{0xfff, 0x8}, {0xee25, 0x6}, 0xfffffffffffffff7, 0x4, 0x3, 0x7, 0x4, 0x7, 0x2, 0x81, 0xfffffffffffff000, 0x2, 0x7, 0xb5b, 0x1, 0x40}) fstat$auto(0xffffffffffffffff, &(0x7f0000000180)={0x40, 0x8279, 0x7, 0x7, 0xffffffffffffffff, 0xee01, 0x0, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x101, 0x0, 0x5, 0x7, 0x400000000000, 0x100000000, 0x8}) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="100026bd7000fedbdf256c00000089002100c4dc540511dd98658da8b019d0eb4db3588e6972e2a5eb5b1b2c39744f964c6909626b7dfe81c423296bdb4a36de61b4916bad13484ff090f5451e516919ff290100431841a5787914755e5cb23280ed8d1c9cf485e11292b4cf053886813f6964a4e4e9dcacdede7e84780c536b21b811fac83818fdddbfec000000180033800c00fc800800cd00"/166, @ANYRES32=r2, @ANYBLOB="08001f00", @ANYRES32=r3, @ANYBLOB="08002301120d00000800dc00070000000800230101f0ffff"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x2, 0x801, 0x84) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r6 = socket(0xa, 0x5, 0x0) getsockopt$auto(r6, 0x84, 0x20, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r5, 0xb81, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) socket(0xa, 0x2, 0x88) socket(0xf, 0x5, 0x3d) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x2) r7 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x169481, 0x0) writev$auto(r7, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r8, r8, 0x0, 0x2) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x3, 0x0, 0x4) 1.019952845s ago: executing program 1 (id=334): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0xb) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) r1 = epoll_create$auto(0x3a) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) (async) read$auto(0xffffffffffffffff, 0x0, 0x9a28) select$auto(0x8, &(0x7f0000000240)={[0x9, 0xa, 0x3, 0x4, 0xffffffffffff7ffe, 0x401008000, 0x80004, 0x5, 0xd3b, 0x34, 0x6, 0x800000000000, 0x800000000400, 0x3, 0x3, 0x5]}, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'pimreg1\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e"], 0x24}}, 0x4000000) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) (async) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x26, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) shmctl$auto_IPC_RMID(0xa, 0x0, &(0x7f0000000200)={{0x9, 0xffffffffffffffff, 0xee01, 0x4, 0x100, 0xb1fffffd}, 0x400, 0x400000006, 0x6, 0x0, @raw=0x2, @raw=0x7, 0x2, 0x0, 0x0, 0x0}) (async) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) (async) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) (async) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x8005, &(0x7f0000000140)=0x2) 967.531552ms ago: executing program 3 (id=335): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x110c237ffc, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) read$auto(0x3, 0x0, 0x80) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x40, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x80000001) mprotect$auto(0x5, 0xe6a, 0x6) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(0xffffffffffffffff, 0x0, 0x80) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SAE_PASSWORD={0x3a, 0x115, "cb98f92f8578c05c723412ed5832c585f9f3a198148db4490bc252179908a3a9bef3aec9b4eb89eed318c7460db372c7cf546a87fa69"}, @NL80211_ATTR_S1G_CAPABILITY={0xbe, 0x128, "4abaf50e54b0538de954db5ea79d6a9453c2307a91d2ca1d8f2e7c90126ae49a14936ff51fc17d180ba7550713ea21fb51c5aa7b27adcac9e6957b70b403eb8c5149122f0235f7f755461de092e7cb5492c3e1b87e3a0cf32fef685172ec1fcf251c1b83db380cce35b572a8327a0ace4a9d4ded75f1c4aee9e400b2047ff68d294d0c95b4efba8f3b8954256f799c6386f1696904c59aac384badc325768ae6791cb30b2910d75f586e53cec62725b6177353cdf8e12c43913b"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, &(0x7f0000000080)=',*(,\x00', 0xffffffff) mmap$auto(0x0, 0xf3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) 862.67371ms ago: executing program 2 (id=336): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) ioctl$auto(0x3, 0x8108551b, 0x1) r1 = fsmount$auto(r0, 0x4, 0xe) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = fcntl$getown(r2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async, rerun: 32) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000003c0)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0) (async) r6 = getuid() setresuid$auto(0x0, 0x0, r6) (async, rerun: 32) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r6, 0x6200, 0x2, 0x9) (rerun: 32) prctl$auto(0x3e, 0x1, r3, 0x1, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000002a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4260000", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf2511000000e5110380804330816d175f9f46e35e046b415500a7800400218008008000ab0f00000400178004001680a882f6e44a6f576c1fb508000e00e000000104002e0004004880709d65fc29321291b202b65e7d2f7bf32fd13e56633bdd7a3fd53bcdf371e5462198a2000000c4c2f7d027e22c6d9a5192c8d5e55614cc33b91d53340c13da50d53735c99bd5210e9cf431656ed8443602fd8a1400020020010000000000000000000000000002a900268010f01fbe8fb9eed8cc82058dd35c642507e23d3336678ad1c27009f6a35b7fbabbce15a2f9fddf42ff8a18f00ba9da6c68db2f7a03d6c8300a8b4e3f4ae6453da7464d1b2e24de677f5583b0758b2a9bf76b7c5aa115256f907bb0ed2c443e2b9e6efdd1990e6640b75f3e5fcaa7d4c6e7404b9a1857f2f20815d8b14863069effdd840aa126fb1c5b6b3b2f5d55136f410400c980040008000c00fc0005000000000000000000000c004d0025550000000000000800180000000000386fd67bcd57804cd5f38449d393c7fac674c6c27bd6317d951090cb86f4581925874b512573b392d23f79254223df5f0445232a9b229854e7747a62f850e55be0b8396f83c3ef536ae8c4c5318baba9e5954d5d7708a844ea4780952b59ee52d746de6f4a83449a2fec20595b2c9a37a934a4d5db7904100f00ed1f1bce52bf6fcef06be8f9aead231664a9a0dd72ba24a26c486dc93ca50fbed940a2a7f43e7501d492bc3c399e4cbcb4545f0a9aa20061581618beda64bc72dae89dbc1b9b88be4226ee785919d47286079a0db8711f85c831c219b6068bd34ca1774587b1090823359ccab99778a3c0cdcd528b3308abf38686740fce2e9f223e0082a014ca10c2b398587cc2e4edd4b69e526ffd28bea3382f61c4136902c8bae6ac099d6ed3c6d703f7ecb4b81a10f5af2d7d920e05259a145e7c56f0131922995737affde82a1fa944fecd72f4f7d4ea9ede5b07255668721ad099db5187cf7685dc399194c834aabab3e4b562ac7a7322005a736358bea60f3127af9fc47d9109fae35cd46ceb9c351dc1b4a708917b9a880e8e8571e969c83cad373c076f537b4adb95541d701e36fa47305dfd2427e7e59b84c31c03b69ba4b8f3cf6d2adf89a5910e7cbbfa2b3d2d6be06c60072cdce8b90a868fdc3555b8117912d151af6ed39fb16a1fe089b50bbe1b638494057de3868e8e13c55c97e71402b3d21d22e0c2ccda86cb2804b74ebe17505e21207f566ac5e377aee651c8e49f6990fc24a01a87a5a5523146c48845d0295646ed21fc1fa90d45c4663868450946e7b2e235965ffaa5b736757459b1872841939f3d84e275864e6f0ab9263543ab63cd50b7f65ea8dc18dab246ae9794a1c64e91f15b0db627a459ff30ae0bfddaeaf7cc9895b4ed46a3d1e3e8331187b3e5e7a82d2b92374348e64d9486031c94604101fe5d7861f96d36af9a53e8571dd154ccca84f31f7f9c9e064a90e99a07a4dc93716b2935b3af3d5c12c83fef9d0412ffbb033ccac4b166462b81cb7ece8b7cd57e9c5888fbf177d6e402dc28ddbc722e2228f8421db38daac65a1b7df4a4263cf9bc59876320d002953533d1b6083128bd83c32e329ce3e6df1c0b31f238fcde3b1bde29080a6626406a9c5625712b09dc11390d6ed6154afcca13181ccace8c74d20628cc43e28f20cfe1e8c913b4056e689e0bee2b3daa85428850a966421640524ff3383ae7c8867b0a2217620120bfb41f1c4b15473c7759189a5c5cacfa9a8fcae17dfea851ebe467260dd099254a2ba4b913e1b830603e2425a0d67f3fdfdc297b6162f22a4c62f8f713694ae0df5a659db762e0517f342e39dfec47d9a8031588e8b34658b92e464b468218fe94ccdf8d8d72554d8e3977deb41a951bf99e5f1037af4d9b63ec3673865f06165e8c2addfae55a3f12923a182f4c0fed79fdbe4c5f8ed1c4a50d8a797b19cc0e2195411ca466d76ba64d29023ee1e7bace4e923fe92dc820144bfd7791f965d9c7f52664b8e43fbcde52e3af27772099dd7cc2a42c4f60ca56bbe5779db1cf4c6ffb61943b919f797635d195bae73595c83b4224d61630f4f9435ad9afcb87c16cab17326ae62138916a1a73b31487a13a475ac46f7d5b0cc4bd2941f1a34acef7ba38d7274165e0b930eeae0ec0b3cebbaa25497149562c8a11c54c673375bcc4c151afcad16cab5081a5a45ae1ba01d73d0341b6911426ff16c8cfff2d7d3935b6ba3c2d41b37707c52c20353e4eb09448ba25305f563d81a0c02bc49cc2c3478cd6a2591dfde2216609cbd3c8600574d6ee234b3094f592fae958ea8419da716c1d3ee8fd941c548ea8921e57ad3e7a4acaf5cbe2c3e933e63dc60750e0a2bd0a1956f15073f3a2dfc9cb030dcfe4751f7e215630bb24bfbb7ac16b9aa543c2d5bee057b9f926247238da1cc4edc908c982c4b50b9434afaa07889deb0ff2198b6975c1b9fd101104744c12acaac2dd4bd41f3cd10c61a32ec140e5de1e64b37454c89b84c757d6d7d6460cbf2fbea0fde2051b09d186b09a18b8c1c3c6213759b51375aef4dc6f12626fb3a94ab60e13b48aeab19af3265ba4bd065b0179b5f65a4e56fecd8c7f17b1252cac2818c80098373bd6929e5c6eec39f1cf6398db3802cd06e88fb67ca5c5610143dca1a0700737054b4849441a5d1d341ea94060da74a5852b821329c033c844315ec2de87f405f12f554d4a9ad9ee143655410b59d85867202f5223abc5f2e09d6cda401c1b50053fecd7dfd853502a0a242e709ffd7806b070ceb6fad3a90d7a871e4080221d6e297d9e34aeebb4f3e9d20f5e4ae5272b8c773b82d8ad466a84a5de41abca53a389da115c0e7c0646778571b703b08d047c8eebb487dde9b70578fce075188117fb4f1e12bb4f73f7dc0c9fb901921d97ba8348bb822fd29ff7588e5c797e8c2aa6a3ee1fc9eb113a3a6ab66126451f700bea2b5d41ce57d28dfd3cc110bbc9ccb20a9149a959a2c8767a20d201d8bf79a1b74cce4a1dfafaa49d1f42018173165d1519c841f22c947700a063f220d20972f698cae9beb8feef1f807e631b2b379a52812af29033f6c26b937898c42147a5a75d1376bb0f2d62e6e98ac57f08b7bd5eb0f2e4d6898ea360b46717bf746e03210e3ee8a327198b0f99055ec348a99ba503c8a052bd2e2655f98b5ebe0a1b0245d22ddc400a0ba1274d59293fb009ee76ab21c09eb4974a2763e95b01bca3167c7df126d98014155bfa91362406bdbfa14da62e4848835d483ad29e556f3b112274904b956c37e5a515683cc547292bee32f2c30bcdbeafea7119c5ef404627b6b4f39416fdbde5fd4702354582f17c6d8e591e81b336f1f1b0b016d8564e9309e06920f06561f8351a1eb406f3c94a2767e6e702debdc0c5d479f814f6210b3a842b2ab1a5d6df2d0fb3187c0a84a3651cf36fa7c5130069d577d8b272290426d299db17bddf1fda349411d0fff7da4303cbffb0adde91fbc2228c9286f14674da55b845d7cc6b4500246f4ec4bfb64c65289c05d845c3cc6f73790448742baecfc4fc6997ef8ce933807f64b0397150906d06cb554061e233a63281a6d139409a56e6b27f510325687f04ac07fb8fee5c554576048a3944cc9a8fae2bb72e8d57477ad855c30a7c89bbf4bcc399b9b057227c0089550af4045f4d63f1d4a166710a9f097551648d2c1de41992c9213913c36f9b5c744256b54bb2c34aff7f682115360739b9aeedd226c898f0529eb21c9cb993e8416e98ef1bb0d29dad4c92e3e916baa2d6164f224ef7853f9cc5f9594e173bebe041958e35f838ec166fcec35dc2c67a52113c2ae532a27e243496707bf37de034593fad356cd049a1ae26124ee9f9ab517cb03ec3a300a9e4065f3c1c48e5da4fcc0ba9f345415836b64f174fe75404c765444ad38fa53be2c6add9c1553060595b1f62cb44a1ab55e0ce63072916f8b8274b6df8263a396430ea337e2c6f4123b2b78c7f3f791a0a1c9d2c45f96c90909ad3492b5dd758c65d3156f89a37077c180407e879fed8c6de8bdd3363860c2a7d574e2d9efe6ddf4b4c8731a953a0c079c777881ea1bca9469e2a399df0b072d03de8eb6fb8810aa0cd0e505d7f8b9702e9bf717b38d301741242683125cbcde783002ce1f8fcc89c7e84a6f4e37852c18869e83e38cb67537aecee6414f9d1de8998c47b7b296983fd28e2df76fd6b44c2ed41be89f0122e1400906c59dfd96a735d613c5f9994c9160df951c7b76b17502937d89922b51e8b8b66cdedbbb97cdbbec16f4fc5fb9cd34386f7ac6805303bbb228502ce40099947b4d9120f7f348fb4739c44990699e49a63b7d6f48ab4ea6dfa8bad2c7fd80a40ecc4043cac68b3dcfbce0339d05782c6c84bd2b2535c0a47c32fa54c84742cf55362312793664b84874c293849166ef9e4ffb9c66e0db0fe80af45cfa620e5a36ee328a5a3e5e1477b34269c4c98a2f46fafa17ae9b79cd8779a9a70af98f8158829b34295138ca4b42d3fd18cb1cb35bf68bb7bd5c2ebe24e90d2cc9d2f0d8924af6a35dce0eda54d01d102eca0663d5c89c1893b2793d44a87c57aa9d1a5125fea1930ac5916e8b5d9aedb8ec44ab1ba24549a4d715a8f0e34da0de627ad0024b3f49ecdbb399f21bc1836e7ae78d9a2a2b9cefc4f0a11b7f95c6634ca5f31054d71ff79425b21eec4032603d679153a32ba4768bfe1c52043e5e648acab33835d6228713af2ad11fa349132df152788d29e5309b711a6213d263aef206ed2ad1d4f9a1797a7ddd6686a8813314eee4b83c28b82b3c817c928f87f19177a7622faf871eeb97aa925bbe8a9ff905464d0de254c575b726086f54e30b9eac4e7eddc403215bd00c8354ff360cde1eef0afc030305b9a1b741eb20506af188eff984574e6f82d1019804dfeb217eab63e3277502aaea45776c4eebe7a488aca9fdb4c3a345a79107f430308cf1a76e0f66fde75b13396198863edacb04fa107b3e2e0ef2182d07287710630a2a964ac53f5082c465f562422de59877f89629b663eb79b8aac86e7cf8c3223c5ea31f241117c4bdc433b2f9ddf77b5155418d70a81931193b2dc1c43027fdd79af5ebaa5844b14ce3fc2642986ab1ce9b0be6b7cf4758e57d0e576d315710222d6c263f5c95a8554cb5352c963d837ab91ac7902c85e9341c012673bb30ec17e18fdb2dd2df9ef8225d8277434d2e768820ad04128d51ad1b40a376d2e8a2e1f873bb18d33c08e938f2004c3f7db9b77d5fad64252e1e7c396a71ea2c047eb4f1d1e1173fe510ce2f3a92b91c9c61da4d3fd8d25225b1cf30f90ebd3aaea8b0a12eb7e3a4f7cc723ebf7518819de73b867128c691f23210bc4bf3acdb5a3bf39611bd6c61b9e5bc5e46db3c11744d2ced1b7eed0035f3d08264dfc7224af5b741ff09ff7f00041d7b2405a325651adcc978f44522c2aadf7365a23e5768e5244da9fc9912ed52e5f050c6c2a77dc8cc4a15c5fde5879e9e28a796185e69ee1049828980d1eae448aa7daf62dcd72d737ec35f369433a59fe972774418e66ff3a820bc1b43483a5fc00a2d7877f99f40a2ac330353a902160bd1786396f69641a4897315813c6282489c6b059aa55c41d3ff60e5eaa825aa62a36fedb2c6264afa923e822c6156d6a765ebfe8cbb8c704679794346df7c3fa9c6e52514cb16f1d3527615e0347a7744f81f072c8f81b44f5d7d36c168fafdde1ecbf87d70d3f409956033b2a50547da5e0335880bba96e51f01b6f0b908454f2f587340e15f6eab888f521485389ecac7ec3c061e229a4feea8f7a442a359b51c3c09d355f21c7437886b430a1dbe08d4fe287d3233ea2e5e152ac721ef7b0307893de30a77e36294db054e685bf4939ae9b40df6e1e6b66338fd6c5ba39f1118eaa8260f037c169df7704e68e179d3ac6c454b8437b545259154248461757d91de5da075d13a469e569b5804f5f612221410de48b5214d8b31326cea11ef909ff9ac6caad779ae0a2ecd7b830d726f97d0061b4630df65b2226b1805a572e7cde9a73f78c37df011975c22e5d79e8d3c4e38623331af12706688a331e185c7e87ef1ffcf717a380a665062ca5223efde5b0b6637384143a7099561d1214ea24c482f4a06b0bc68d636319c0187378fd1e8650fa2bbac9e846ad177c6547997c98516dabeded3c8f7d25dff70c4e2192a34bda7ca81789dacfe2a6d752aca09fc81c982b925ca0bebba76e4acde3db1ee339ab22037650ed171db4b3248de6973521bfef3be23d5b062b7fd70692eb326bc101d40dbdcf51ad31a32f93864df85dab3ae30b8755f31beb441876a61c6445485db69421b400c8c3c22e6a32e9da84a728acc590eb3d70c132d5132cc6d3ff2c6738a1e564d0d30b2f12122e6e4d6ebe8ec7b39d8f011dd65b34265658d05465190ceb9761a3324eb05350be36000000004d130380e40027009a74c01457998f050f89874b4d75fbc1dc19c7222d3823925f6b8b7c8b49e3ac4dad676f725e2298d111841310e6506fd2026a49f0f14aa4b15f24d9971b6d0a1a66c632e21362ea3b6fa7e92f0d522a23e7bbe9b0dfdd0b0df62bcf5180d3219c54d401ae91d92ab3fece22d6d0a61848c019ee2ed9e33865073d113a645bf583a219dfe128eb8170aa0ca2e4aef209f660f5d50048d86262440b73149ddbe57e5e22ae6d3746c85d620f27d694f723790535ca4a01b11caa47eeb46b9876c48696ca30f61fcc4786ed0e053d547e818c5870634e4448d8f1be2aaf683511c30800258004004c80421115809d802e1d6f554ba1bef6aa47ec5bf4f98666bd4060755c753f27bd7e505ed412b9c3b9f969e356a4dae447718bd3e4c62f8a6ce6d4c9d793061d5b71f65ad4d8cf7881571e0a8d07117e69b288796917e192e6e615bd098e976bcf24207834291f0a16f41503c8c108609b8e12f5f3ebcc724720f557f712747be3d67587fbb5ca4fd78dd3b5c8a1708f556f5f4dca787cf82d3587f9cc859f787eafd02a7e39b4f1ab13dcb9741011bbc26d28dfb4122b45eb46bacea3467c7b86b8611e65d0ced5d44ba0b936b4c178078cfc4a4c1e8d80f937a8157f569a1540b5fc75eb0800db00", @ANYRES32, @ANYBLOB="68e275be13e40198d491c80acf173a329b8b65ff6a12a76e2ed998d6cf55414a35294ace262f4c2d502bc805b679d06ecffab488042329ddb6bf9b27ba0938101b8a4dcefd63907246eba4da843717edc16d40d11cc71b557fe5ca56d62534121aa586fea501c825d503428d89f29e2ddf5be2d6992255b9990848b2d8a0b49c9660d7c251752977d2fab1aac6046fdf822d706529f97cbd6bd4201a395adaa3e6f2fbded02f67a27169d149893a2065283a87b21db44089295e8ddb37746584432ce7fd56c8e5126954465292b2e14d1cbcecd216635f6baa5f9b9a846d0de01039a6963dd8cda05930777dbaf72b3064a82ab10cdf4c6f16888d5ed83012f8581582ab5faac932c7d041d432be88bd1ffdda9937191acbe2d542e4b41605ee9d34022a8500ddd8654da6df5dbd6446878aa7cc5b7e9fb07b9573a1f774a37fd7050b7800d76731ce9fd6fb465c55b63f90407c3b748320728df78caa84eac8cd19b0a7b3fa0ab77c95824b84f4958a5ebb637da8edee231acf89a84bc9534c73aad13e4cd9491338ea671dc592636e95ff442e662c5a71e95dce9671f58fdcc656f748f83017d82e622ff5f208d25bfb05fd88e5e1add055fae23a606acc064c3df89040b41f10ad49d7c205577f7c785830afbf5e2881a17c49393d5f24286d1113e4e58bdf424120e7964f4ebce46de3ee6f37ad672310b97d42f636f05865eca2f637ab58cb1fe6b30c988d21be0c35cef6bc71658b9fefaff5e65d047303dacb7ddfb494a08344f4a7b583ebda393eee38de4779e5646197f2feeb3d5e7e30a02623f594e066780b5fa87cb81b279de6571f8331002dda743273dba5bd98b54f54613c0c57b13a97c6a4e4b6865433191aba5a693891146c51a1c63fcbb3a88989acf51a3f4fe3d43f221c3723462733d66276b700d3d3112126fea37ef8e3ce4191f69ea05c8d3852cd88e2504a0628140f148597bdf9b9061a271bed018203a28aae0783d497886b2dfe98ac622f1492b3966eb918f5fcb062b9f315dc501b8125e9d6fb7b5227103ead3fa756de763dde61484b17623a20f029f2a3d768c2be9e9f4fd98ce102067c169c1893ed9ebfaa77348129adc2eb80fe1164ebf33325bfa183cfdfe54242a8c8ab2030f0ade2e13f1f3e001fde7814c263fb13dfd42b10abe8d315dbdf52e9291ba206a8e2ad066f65ab69f3d7e390bb751130aa494602e8b5f9d16fafa7f1fc99c4bb724e866d7b08ef2cf31f4cdda9d254ba565d9f1b9733ce8537f3ca0f050dc7555b75e5084ca596d4c384cbb3c69b0f2852a033adcaa885a0a9cf577e7cb4e30f395f0ab61417102e541ae2d6b851b06afaaedc0f19cc012c3f443efbafb179a864ffac9078d121525d40d434804a0b56346e616bfcaaa6a38012c242c5278915217e82ad805abf5949e89906cd8905fd4d266f6df53a76ad46572d29c385eea9d4f1a8a04c6fa4d46f1c6271491de9568b7ddf73ca87e2cb006fc743007a8abd1ba3f283e822244b291f80a1cdf1193243d4926dc081605ee7b52ec7d1a7d1df024f0cd878cef88c921dd689da82808ea89f19585e3a84921dff6f70b27a8146ffa105b7677354e980649605f5709c9f87ef2d3a011b8c33219bd4d0c8840b92a98e3be6957c97301d2af2b54c638bf7f68199da9d2c0b0edf222d486ce2c3ac0eaabfb7dfcad56014dc4333233a4d985e8dc147c26bc84bc61bbec68d3ea5e48415683678515d159991e5043a7b652232eeaba2aab82005279d62f06ca391338a0ad1d722fd7d7ab5a139c0e643206ce36210784c21b74c919bb622e91ed40c26613683f38cf76f674d725544b08670ac777b56a7d0433c5cdb496109f680186b1d3076e184a0d8c7b0d181371657dad99dc9dc5ae39e7773395d2de07447f8a880b3f4b60b99c39907a658ba757e3aa1c1edab28515bda8e999aed25f2156d2d6849918ddf64315408806d82176575792560a73a37533a2cc30d5eb016a08d4c6ad06c5a401bab1299af9734c497eb67d49fe7ce689173106f141cd0ee6a34daa38808404895ffe5c3b2e9bd7d126df654aca76dd99c440fbbcd3fcce8f5bfe6e4fa3c4fb298bc6b13f86798e1f9fb412330ff6947d6950963a0eb1201d0c09818f7f748408ce48af351288c7bcbe4d3bdb89b7fa89d274a0c20b574c95359ccee1825905c4f0b6674726e739a89ceba02704f50f4b937b4a5482206be59eb6f5907f428c923a17c3010caac144db486cc892d21882820eb8af396a9c02c78595b4b4937193ce75f0c3f2bb7e672941f18eea82e2cb9df1ac63169dda81e532b49613a1bcd25caf7f10ae40a0f49a1eb0ddb141970aa64a11c4c81e80cd480186ca949ca5f827c59ac65db4fca48e462ded791eeba9f03604161813f06a39a3a73ad17b5c7f52491e6f8ee9e507c12d3f4fce643c4dab3ff553464643ec3120efc0c141bc2c21ca9a5c1c3af69877caf141ffc58dce6b95740e4c1eca473a28a7d09c57b0177f4c0fc18ed4e9df9c74131f29424534f6c06b83bbe0a4f28da8e927597665508b2048d4043efc261b1e68e35db9158a81626243affad187e0de32239e9a0ae0a52c99aa9829d6be08cda1bfbb2ac49ce4b3fde217c6d3e47d7be57a3ac2a9e02ddc2244ad9dac92d10db69d4976aee65ce83162e284a8bf299f6559ce134269c202d8c1c76196418cbcba79f080b5f0982a6415213da8b27b4be1c83bd99b9487215729e839840e6ae1ee248032c68d6f6b6b7da464f96c2f16515d38e9c877e390b07991cf6be41455b281ed66911a183bd2bd31ee1b4beaa7b1d868ac6a7f62fbc80c3b67bc9b43c376fa4464b6efceee0b60371d94ff6d4e78081793d7487f95307d718858390da772964d82e0c748763d518e8dbb8d2d46aca3932dcba533530b9a2f93b1dbd1f2f3b39e2700299176dd1cc0c2ce5814896e1ca858e2a1413291e8cd3e0a614bf301421a330774314b56985bb846d2c78a4d11343f2392d593e9007adf839221a9577f22354c8c64ceae2dabfa32e22f9fef48f64f4baf9cc42f585a1c3d35aac9b67a4ecd6ed5e51c575af2234734f8824d29bc7d22e0085b2b60bfe28273fad804849a445c1d933fd09094743c4b93f09692b7f1c694f3602f6e3922cc22be10953bd01ba556799ff3c7077c415116d8ebd6339a38edc9875c80fde2d2a55a9b756329ffa710c974c0802abc3504acda8e0b86ea6ceeb569b4592533b213458b3be127034dd78e83ab588171f291eca4d24401a9f2331056e5cc3b73958cba5c967b17df7b76d538a641d0638ff30cc1b3b4f54a4331f43bd2e957c75b461315cb6de236174e46c530ddf787853499e3c3ada9ca4a86b0411ce57d4597d356daa9766379742a633117a4e12fd2013b1ad0a0e59785c7acada2a26c98104e0098733d020bd9cd01ff17df432ba41e13dcfd451459ae14027eb6ff74c8e15ff2aa41f844710a1794064d332783d70fffe0523f47443489e9c5847e3e41070d495a9de00966e8237d24c301f2d1e1f5b2236a635f228577694261cb28adbdde0dd142ec66e99ad1082d9c7dbea6954de14c53b14cb5843e4220aea8b9aeca9fe68aff1e4e5d67cc4a10e758be1eafe12996e864daef7b21683efd3d17fd5606e79f36cfaa92b40a7ee31427aa56bf80347c24ff17724eee629d34d1a99cfec3c683bbf829ac3a121fffac1a06ecc6c8848b2de301c98e96e37732b2665fc082ec0c7a11208a9192fcfd92ab7328d2b52a038e4c942f2eb77d6ecb3738a30ba4042ece6ec7f5b1274e89ca73652ae034c76ea52b95e4ad2b0fa3e7e50d4d9cf001252f07781bddef6f691712a7bbaba8da4fbb76377813dfab8d06c812bb15f8b9475f847483d0a94897e32078612326ad3893843f451674f7ac7d1d2e20178ccf78adb920ce086a93b09d53ee7fd2b6605b0b0f6989d9932c338e4c60412a9025e5c0fe0598c3277e12b1331cf5fa5e908d1db71004e26b2c697f107b8a416e01cec2b8807045f4c16c0604a9694e7cefc3757a69e3807d91cb64020a7cfc1a2ba9df4eeece930853232d6f9ddea1ab9e549f42e2869aff7bc448c14dc9000c53b07c44e64f910d1a8edfb42468e1ad37ce508bbb22cdb1e9d2b9de1f18b59d11b07e961c1fa5f3e023a0abaab8960865b7e3b3b91b27a5531173123ac071035a92dc9761ad32e3e03071df6c828236d3d4c2c8d1c2929e307c4e84584f9ef28383b61effab927710c331f7e7e4bc510389e8351bfa5b7d46fb3a5fc898bf23cf2075a590091228740f7bc048d23e2b69bcbdb212dee20ad94aa0121cdfcfd550a2535f8073917d997976b5d037411a70782508423a22bced0290ff7413f343a93e7d272df8386f9fff7b71f26d7003816c2221eb05f7af4723273ea267375c4e22bfdc53f4b4989b2e4922b8afcaed568f5b2bf472fcd52901cbd70e687e98268d62dd905a42d510632d06effdaa39933c2547346170f94c17cbe7a17a7fc94c6e8e0b2e7f3d4c94fdfa5424de98ea0936af86185afe189125055a48998c6c8c21b00d6ff32d47a4ff2b7a0ef189059e7875de50f034166b12f2e82f3d056e335df5f35373559f8bd317c1bd3b04b8f601c05a4e1e631fd5ec0a7a9af388b07fc1f8b03add1199f7116eaf7ab8cd8692645c0b8a4d2411cc5be4790de5c24f4098b435cde0ce4163e06d57ddb888aa151c188ac794533cfaa0318960f63ffa51c00c998c12e36b44d0230960a74aa07c4cc2ac7c347d201c1d1ca99219ea4f7c2f2552ffe3609b6fe47715ae851d97a7492219663d97e0cc297ab973d34fe0c3178d50c4c79a7af7ea34e8cd08c71f15443482e282b57f4e9f73a891215babf865f4a5c78a563255421c6540ffe75f9cc1d8f7eeaefccf08090004d120e8c483e8858e44ab53513bbe84a338ea351ab12b6492840ae2991bfdb079430f0ddcb61acd5c2df20d5ea53ac7174100ea3d2c93e9a11621254f7245a136da62c816696497dc69f41243438687a52330fbfe786385a1cb628274bb6a33997ffbcc28196f0bcdb8cd3104524e3b510b801ca614135195f8607efecdb264c5a77cab0c2dcb2b18366a1b64002c98297e1d4733844a051893d7902a568f2ffb922fcb09d0e1e262a58e5cf13f87dd658bc03553fc29e13831d1fe49e6000683e57e5a6e49fa98a28cf7ab315a42df5ae0b4fdb068f81fdf9ae784877d88e9b8fcc04c705d826b528b1af2557eca0176061124ed182a97dfbbcf29ad658c70cedc884c35724c9e3ceca33797fd513bc8b49c0e3f43ef047a0141808c530795930ba7726b9823f904fcd6dff2fc3904a066fd38a118eb6201cd9eeb497661227891b0da26abba9f0820536dca3d7ca9d605735cd15d18fab037680cb37848d0c03eaf9d88103860f594e8aa2773e6e4329af8f15aa09f3d5cbdece3ac1745266a8e10ee50041a16b5095df00ac1e57411f0ac35911dfe1579269989f1400a97331d06ddc7057cfa3fe5b571874bc53eaab46fa65d7e2cfd7cafc9a0195d1400db4b5e0f85eca06faf18f023622a4357d44c7e187f7a52856046e03495e19bdc304110bf5f706591abf27e52c967a0925a504770b8cd103ee797084b0e628b73938fe050911c4d8d87c31c5a8981dc922f43ea2fe37ea466046a848403b1680aaf9bf48cd146c13fc9419bbc887697f0529bd2c697afdca6db97a2562e827fd195c1c2a931070d91398c13d1409b82d67368890066e884a28db71d1275c34d717af6ee37e0b040008800400458008009d00", @ANYRES32=r3, @ANYBLOB="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"], 0x26c4}, 0x1, 0x0, 0x0, 0x80}, 0x30004810) (async, rerun: 64) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x102, 0x7, 0x476, 0x0}) (rerun: 64) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) process_vm_readv$auto(0x0, &(0x7f0000000200)={0x0, 0xfff}, 0x0, &(0x7f0000000280)={&(0x7f0000000300)="1138f4bff347ce668eca0a893000d4b6228272771f0708bfd770573ee574f8ebcd04de3df6f402ebde1a4cbee55f9037676ef3c76763da", 0x400000fffffffe}, 0xa, 0x3b9f) (async, rerun: 32) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @inferred=r7}, &(0x7f0000000080)=0x2) (rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) 59.780686ms ago: executing program 1 (id=337): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0xa, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0x2, 0x1, 0x84) setsockopt$auto(r1, 0x84, 0x21, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0xfffffffffffff54a, 0xffb, 0x8000000008011, 0x3, 0x0) io_uring_setup$auto(0x1000, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) ioctl$auto_FIFREEZE(r5, 0xc0045878, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = signalfd$auto(r5, &(0x7f0000000000)={0x100}, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000440)={{@raw=0x200, 0x0, 0x0, 0x826, "d375de81aa00d12a4966014d253aff1862f1cf88a2a36430e24811951103d352806dc65c22efee7ca4ab25b3"}, 0x0, @enumerated=@item_ptr=&(0x7f0000000040)=0xff, "24a35540b5ce56ebcd6ffbd3179ea33f658e644d8e976182f6b9b6df3b83effcbfea77d24b7ebf46bd12bfbbd166da4e34a1dfd0871c349755b289f5a5dff333d1563c4bbc47930c917514b6cf6ce52efe9ae6162ca2fa783826deff1fd25f5a020fb82a4ac2aa24f6856d35482696190eb00c843498ba0c61c9e80c5709afd5"}) r7 = socket(0x10, 0x3, 0x9) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/cpuaffinity\x00', 0x20800, 0x0) read$auto(r8, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) write$auto(r7, 0x0, 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r4, r9, 0x4, 0x1ff, r3, @relative_fd=r2, 0x100000e600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) 0s ago: executing program 3 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r1, 0x4008af25, &(0x7f00000000c0)=0x3) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@prog_id, 0x6, 0x3, r1}, 0x6f3) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/status.15\x00', 0x60840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)=""/73, 0x49) close_range$auto(0x2, 0xffffffffffffffff, 0x4) mmap$auto(0x4, 0x10001, 0xffffffffffffffff, 0x44eb1, 0x602, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub6/info\x00', 0x463c80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4a, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x4c004) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) bpf$auto(0x12, 0x0, 0x26) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x1c4}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b72, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(0x0, r5) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x700, 0x0) io_setup$auto(0x10002, &(0x7f0000000180)) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x10800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x28001, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 80.207789][ T5821] cgroup: Unknown subsys name 'net' [ 80.360071][ T5821] cgroup: Unknown subsys name 'cpuset' [ 80.369967][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.801037][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.423384][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.432648][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.441166][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.444265][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.460209][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.460303][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.475938][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.475941][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.502589][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.507120][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.512813][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.524707][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.525843][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.532849][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.540550][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.547610][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.555937][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.561606][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.568885][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.583942][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.136841][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 84.253764][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 84.264650][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 84.276044][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 84.394898][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.403099][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.410650][ T5833] bridge_slave_0: entered allmulticast mode [ 84.418136][ T5833] bridge_slave_0: entered promiscuous mode [ 84.448350][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.455550][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.462778][ T5833] bridge_slave_1: entered allmulticast mode [ 84.469845][ T5833] bridge_slave_1: entered promiscuous mode [ 84.560828][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.568256][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.576617][ T5842] bridge_slave_0: entered allmulticast mode [ 84.584049][ T5842] bridge_slave_0: entered promiscuous mode [ 84.594477][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.623425][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.630768][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.638032][ T5842] bridge_slave_1: entered allmulticast mode [ 84.645155][ T5842] bridge_slave_1: entered promiscuous mode [ 84.654128][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.663664][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.671170][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.678831][ T5836] bridge_slave_0: entered allmulticast mode [ 84.685803][ T5836] bridge_slave_0: entered promiscuous mode [ 84.693368][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.700529][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.707875][ T5837] bridge_slave_0: entered allmulticast mode [ 84.714837][ T5837] bridge_slave_0: entered promiscuous mode [ 84.742145][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.750149][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.757418][ T5836] bridge_slave_1: entered allmulticast mode [ 84.764482][ T5836] bridge_slave_1: entered promiscuous mode [ 84.771534][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.778812][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.785953][ T5837] bridge_slave_1: entered allmulticast mode [ 84.793211][ T5837] bridge_slave_1: entered promiscuous mode [ 84.841409][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.853158][ T5833] team0: Port device team_slave_0 added [ 84.880505][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.891320][ T5833] team0: Port device team_slave_1 added [ 84.899297][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.910913][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.940414][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.951370][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.000752][ T5842] team0: Port device team_slave_0 added [ 85.008254][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.015193][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.041195][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.074250][ T5842] team0: Port device team_slave_1 added [ 85.080566][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.087928][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.113970][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.126958][ T5836] team0: Port device team_slave_0 added [ 85.141068][ T5837] team0: Port device team_slave_0 added [ 85.164919][ T5836] team0: Port device team_slave_1 added [ 85.172750][ T5837] team0: Port device team_slave_1 added [ 85.230244][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.237308][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.263880][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.289890][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.297474][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.324866][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.337141][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.344085][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.371132][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.392387][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.399414][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.425863][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.438250][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.445211][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.472087][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.499524][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.506708][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.532762][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.557642][ T5833] hsr_slave_0: entered promiscuous mode [ 85.563901][ T5833] hsr_slave_1: entered promiscuous mode [ 85.626924][ T5845] Bluetooth: hci3: command tx timeout [ 85.627063][ T5834] Bluetooth: hci1: command tx timeout [ 85.632693][ T5841] Bluetooth: hci0: command tx timeout [ 85.638346][ T5847] Bluetooth: hci2: command tx timeout [ 85.668144][ T5842] hsr_slave_0: entered promiscuous mode [ 85.674381][ T5842] hsr_slave_1: entered promiscuous mode [ 85.680801][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 85.686687][ T5842] Cannot create hsr debugfs directory [ 85.698395][ T5837] hsr_slave_0: entered promiscuous mode [ 85.704790][ T5837] hsr_slave_1: entered promiscuous mode [ 85.712025][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 85.718118][ T5837] Cannot create hsr debugfs directory [ 85.765339][ T5836] hsr_slave_0: entered promiscuous mode [ 85.772034][ T5836] hsr_slave_1: entered promiscuous mode [ 85.778328][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 85.784053][ T5836] Cannot create hsr debugfs directory [ 86.176804][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.197318][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.208752][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.229582][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.289317][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.305922][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.322175][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.341587][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.424787][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.450823][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.469405][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.479336][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.585543][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.595991][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.615199][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.626122][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.676608][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.715948][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.743148][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.774873][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.782341][ T4255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.818325][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.825425][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.850856][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.875420][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.911582][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.918764][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.958143][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.965271][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.032465][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.059465][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.122854][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.130058][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.181704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.188998][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.272057][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.309942][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.317190][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.365114][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.372332][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.426481][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.447283][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.598875][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.707677][ T5847] Bluetooth: hci2: command tx timeout [ 87.707718][ T5845] Bluetooth: hci3: command tx timeout [ 87.718756][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.726967][ T5841] Bluetooth: hci0: command tx timeout [ 87.732453][ T5834] Bluetooth: hci1: command tx timeout [ 87.844837][ T5833] veth0_vlan: entered promiscuous mode [ 87.883998][ T5833] veth1_vlan: entered promiscuous mode [ 87.909621][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.920915][ T5842] veth0_vlan: entered promiscuous mode [ 87.944402][ T5842] veth1_vlan: entered promiscuous mode [ 87.965937][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.002248][ T5833] veth0_macvtap: entered promiscuous mode [ 88.032294][ T5833] veth1_macvtap: entered promiscuous mode [ 88.062856][ T5837] veth0_vlan: entered promiscuous mode [ 88.072654][ T5842] veth0_macvtap: entered promiscuous mode [ 88.095848][ T5842] veth1_macvtap: entered promiscuous mode [ 88.109667][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.128017][ T5837] veth1_vlan: entered promiscuous mode [ 88.148792][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.156679][ T5836] veth0_vlan: entered promiscuous mode [ 88.175696][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.199931][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.212223][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.223627][ T5836] veth1_vlan: entered promiscuous mode [ 88.235849][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.246035][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270451][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.279419][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.293354][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.302911][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.316236][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.338952][ T5837] veth0_macvtap: entered promiscuous mode [ 88.372712][ T5837] veth1_macvtap: entered promiscuous mode [ 88.425799][ T5836] veth0_macvtap: entered promiscuous mode [ 88.458406][ T5836] veth1_macvtap: entered promiscuous mode [ 88.479760][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.498794][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.510026][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.518500][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.560656][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.573666][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.591187][ T2985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.602138][ T2985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.623511][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.631866][ T2985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.642333][ T2985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.657998][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.666505][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.694882][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.705301][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.730098][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.745787][ T4255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.760207][ T4255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.795384][ T4255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.811771][ T4255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.823259][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.905545][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.924736][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.089819][ T5930] random: crng reseeded on system resumption [ 89.098222][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.119944][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.132964][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.178044][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.268851][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.286731][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.376949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.437235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.616679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.786384][ T5834] Bluetooth: hci3: command tx timeout [ 89.797019][ T5841] Bluetooth: hci0: command tx timeout [ 89.797025][ T5845] Bluetooth: hci2: command tx timeout [ 89.808330][ T5834] Bluetooth: hci1: command tx timeout [ 90.236575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.250541][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.286466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 90.665548][ T5939] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.969378][ T5956] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 91.017000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.025743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.034448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.043228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.053053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.514720][ T5961] input: f¬ as /devices/virtual/input/input5 [ 91.866603][ T5841] Bluetooth: hci2: command tx timeout [ 91.877918][ T5834] Bluetooth: hci1: command tx timeout [ 91.877925][ T5845] Bluetooth: hci3: command tx timeout [ 91.888890][ T5841] Bluetooth: hci0: command tx timeout [ 91.958472][ T56] cfg80211: failed to load regulatory.db [ 93.383867][ T5988] ima: policy update failed [ 93.396643][ T30] audit: type=1802 audit(1766253469.825:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.17" res=0 errno=0 [ 93.463553][ T5986] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 93.641787][ T5997] WARNING! power/level is deprecated; use power/control instead [ 93.652357][ T5998] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.664057][ T5990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.683917][ T5990] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.729005][ T5990] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.750628][ T5997] hub 1-0:1.0: USB hub found [ 93.753771][ T5997] hub 1-0:1.0: 1 port detected [ 93.805786][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 93.808492][ T5990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.808550][ T5990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.814907][ T5999] Zero length message leads to an empty skb [ 93.828466][ T5990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.860226][ T5990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.860330][ T5990] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.908017][ T5990] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.929275][ T5990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.929406][ T5990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.968208][ T5990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.248734][ T6007] FAULT_INJECTION: forcing a failure. [ 94.248734][ T6007] name failslab, interval 1, probability 0, space 0, times 1 [ 94.284276][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 94.284312][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.284334][ T6007] Call Trace: [ 94.284343][ T6007] [ 94.284353][ T6007] dump_stack_lvl+0x16c/0x1f0 [ 94.284396][ T6007] should_fail_ex+0x512/0x640 [ 94.284421][ T6007] ? kmem_cache_alloc_noprof+0x62/0x770 [ 94.284455][ T6007] should_failslab+0xc2/0x120 [ 94.284489][ T6007] kmem_cache_alloc_noprof+0x83/0x770 [ 94.284517][ T6007] ? security_file_alloc+0x34/0x2b0 [ 94.284553][ T6007] ? security_file_alloc+0x34/0x2b0 [ 94.284580][ T6007] security_file_alloc+0x34/0x2b0 [ 94.284609][ T6007] init_file+0x93/0x4c0 [ 94.284634][ T6007] alloc_empty_file+0x73/0x1e0 [ 94.284660][ T6007] alloc_file_pseudo+0x13a/0x230 [ 94.284688][ T6007] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 94.284715][ T6007] ? alloc_fd+0x471/0x7d0 [ 94.284753][ T6007] sock_alloc_file+0x50/0x210 [ 94.284785][ T6007] __sys_socket+0x1c0/0x260 [ 94.284809][ T6007] ? __pfx___sys_socket+0x10/0x10 [ 94.284831][ T6007] ? xfd_validate_state+0x61/0x180 [ 94.284871][ T6007] __x64_sys_socket+0x72/0xb0 [ 94.284893][ T6007] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.284927][ T6007] do_syscall_64+0xcd/0xf80 [ 94.284964][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.284990][ T6007] RIP: 0033:0x7f363078f7c9 [ 94.285013][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.285037][ T6007] RSP: 002b:00007f3631705038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 94.285061][ T6007] RAX: ffffffffffffffda RBX: 00007f36309e5fa0 RCX: 00007f363078f7c9 [ 94.285084][ T6007] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 94.285098][ T6007] RBP: 00007f3630813f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.285113][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.285128][ T6007] R13: 00007f36309e6038 R14: 00007f36309e5fa0 R15: 00007ffdc5787388 [ 94.285164][ T6007] [ 95.716325][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.886302][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.886309][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.956454][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.478677][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 97.102256][ T6063] zswap: compressor not available [ 97.582721][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.685750][ T6084] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.770493][ T6090] FAULT_INJECTION: forcing a failure. [ 97.770493][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 97.786429][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.869321][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(full) [ 97.869356][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.869371][ T6090] Call Trace: [ 97.869379][ T6090] [ 97.869389][ T6090] dump_stack_lvl+0x16c/0x1f0 [ 97.869431][ T6090] should_fail_ex+0x512/0x640 [ 97.869456][ T6090] ? kmem_cache_alloc_noprof+0x62/0x770 [ 97.869489][ T6090] should_failslab+0xc2/0x120 [ 97.869523][ T6090] kmem_cache_alloc_noprof+0x83/0x770 [ 97.869551][ T6090] ? __kernfs_new_node+0xd2/0x990 [ 97.869585][ T6090] ? __kernfs_new_node+0xd2/0x990 [ 97.869608][ T6090] __kernfs_new_node+0xd2/0x990 [ 97.869639][ T6090] ? __pfx___kernfs_new_node+0x10/0x10 [ 97.869675][ T6090] ? find_held_lock+0x2b/0x80 [ 97.869706][ T6090] ? kernfs_root+0xee/0x2a0 [ 97.869737][ T6090] kernfs_new_node+0x13c/0x1e0 [ 97.869774][ T6090] __kernfs_create_file+0x53/0x350 [ 97.869809][ T6090] sysfs_add_file_mode_ns+0x207/0x3c0 [ 97.869844][ T6090] internal_create_group+0x597/0xf70 [ 97.869887][ T6090] ? __pfx_internal_create_group+0x10/0x10 [ 97.869921][ T6090] ? kernfs_create_link+0x1bd/0x240 [ 97.869963][ T6090] internal_create_groups+0x9d/0x150 [ 97.869993][ T6090] device_add+0x6f7/0x1980 [ 97.870027][ T6090] ? __pfx_device_add+0x10/0x10 [ 97.870066][ T6090] ? lockdep_init_map_type+0x5c/0x270 [ 97.870091][ T6090] ? __init_waitqueue_head+0xca/0x150 [ 97.870124][ T6090] netdev_register_kobject+0x1a9/0x3d0 [ 97.870162][ T6090] register_netdevice+0x13ac/0x21d0 [ 97.870198][ T6090] ? __pfx_register_netdevice+0x10/0x10 [ 97.870241][ T6090] __tun_chr_ioctl+0x1eb6/0x4880 [ 97.870265][ T6090] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 97.870295][ T6090] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 97.870323][ T6090] ? hook_file_ioctl_common+0x144/0x410 [ 97.870359][ T6090] ? __fget_files+0x20e/0x3c0 [ 97.870394][ T6090] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 97.870416][ T6090] __x64_sys_ioctl+0x18e/0x210 [ 97.870443][ T6090] do_syscall_64+0xcd/0xf80 [ 97.870475][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.870499][ T6090] RIP: 0033:0x7fa6d2f8f7c9 [ 97.870520][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.870542][ T6090] RSP: 002b:00007fa6d3ee1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.870565][ T6090] RAX: ffffffffffffffda RBX: 00007fa6d31e5fa0 RCX: 00007fa6d2f8f7c9 [ 97.870581][ T6090] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000006 [ 97.870596][ T6090] RBP: 00007fa6d3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.870610][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.870624][ T6090] R13: 00007fa6d31e6038 R14: 00007fa6d31e5fa0 R15: 00007ffcdb5b2ff8 [ 97.870660][ T6090] [ 98.166345][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.166378][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.218738][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.360346][ T6097] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1937339183.1919249199.795633006), cmd(15) [ 99.589067][ T6132] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 99.869315][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.187231][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.271022][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.277506][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.298907][ T6151] netlink: 'syz.1.57': attribute type 2 has an invalid length. [ 100.307023][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 100.406998][ T30] audit: type=1800 audit(1766253476.835:3): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.57" name="dbroot" dev="configfs" ino=8643 res=0 errno=0 [ 100.504713][ T6153] Invalid ELF header magic: != ELF [ 101.448328][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.872265][ T5845] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 102.506885][ T6192] FAULT_INJECTION: forcing a failure. [ 102.506885][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 102.546407][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 102.546438][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.546451][ T6192] Call Trace: [ 102.546458][ T6192] [ 102.546467][ T6192] dump_stack_lvl+0x16c/0x1f0 [ 102.546504][ T6192] should_fail_ex+0x512/0x640 [ 102.546528][ T6192] ? __kmalloc_noprof+0xca/0x910 [ 102.546554][ T6192] should_failslab+0xc2/0x120 [ 102.546589][ T6192] __kmalloc_noprof+0xeb/0x910 [ 102.546611][ T6192] ? copy_splice_read+0x1a8/0xc20 [ 102.546645][ T6192] ? copy_splice_read+0x1a8/0xc20 [ 102.546672][ T6192] copy_splice_read+0x1a8/0xc20 [ 102.546708][ T6192] ? __pfx_copy_splice_read+0x10/0x10 [ 102.546741][ T6192] ? look_up_lock_class+0x59/0x130 [ 102.546777][ T6192] ? lockdep_init_map_type+0x5c/0x270 [ 102.546801][ T6192] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 102.546832][ T6192] ? __pfx_copy_splice_read+0x10/0x10 [ 102.546858][ T6192] do_splice_read+0x285/0x370 [ 102.546891][ T6192] splice_direct_to_actor+0x2a1/0xa30 [ 102.546929][ T6192] ? __pfx_direct_splice_actor+0x10/0x10 [ 102.546970][ T6192] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 102.547007][ T6192] do_splice_direct+0x174/0x240 [ 102.547037][ T6192] ? __pfx_do_splice_direct+0x10/0x10 [ 102.547065][ T6192] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 102.547097][ T6192] ? rw_verify_area+0xcf/0x6c0 [ 102.547125][ T6192] do_sendfile+0xb06/0xe50 [ 102.547153][ T6192] ? __pfx_do_sendfile+0x10/0x10 [ 102.547178][ T6192] ? __x64_sys_futex+0x1e0/0x4c0 [ 102.547199][ T6192] ? __x64_sys_futex+0x1e9/0x4c0 [ 102.547223][ T6192] __x64_sys_sendfile64+0x1d8/0x220 [ 102.547245][ T6192] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 102.547276][ T6192] do_syscall_64+0xcd/0xf80 [ 102.547316][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.547342][ T6192] RIP: 0033:0x7fe11918f7c9 [ 102.547362][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.547381][ T6192] RSP: 002b:00007fe1173f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 102.547402][ T6192] RAX: ffffffffffffffda RBX: 00007fe1193e5fa0 RCX: 00007fe11918f7c9 [ 102.547417][ T6192] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 102.547431][ T6192] RBP: 00007fe119213f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.547444][ T6192] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 102.547453][ T6192] R13: 00007fe1193e6038 R14: 00007fe1193e5fa0 R15: 00007ffcbadf5e08 [ 102.547471][ T6192] [ 103.405040][ T6198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.418609][ T6198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.508566][ T6198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.589987][ T6198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.242293][ T6227] process 'syz.3.73' launched '/dev/fd/3' with NULL argv: empty string added [ 104.754470][ T6238] Â: entered promiscuous mode [ 104.763795][ T6239] openvswitch: netlink: Flow key attribute not present in set flow. [ 104.897755][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81659dba (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 104.913303][ C0] Call Trace: [ 104.916586][ C0] [ 104.919430][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 104.926122][ C0] ? tick_irq_enter+0x16b/0x240 [ 104.930978][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 104.936262][ C0] mce_cpu_restart+0xd9/0x1f0 [ 104.940947][ C0] __flush_smp_call_function_queue+0x27d/0x8b0 [ 104.947110][ C0] __sysvec_call_function_single+0x87/0x3b0 [ 104.953095][ C0] sysvec_call_function_single+0x9f/0xc0 [ 104.958756][ C0] [ 104.961675][ C0] [ 104.964599][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 104.970574][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 104.976214][ C0] Code: e6 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 e7 14 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 104.995827][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 105.001889][ C0] RAX: 00000000000be35d RBX: 0000000000000000 RCX: ffffffff8b7576d9 [ 105.009853][ C0] RDX: 0000000000000000 RSI: ffffffff8daca42c RDI: ffffffff8bf2b500 [ 105.017818][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 105.025779][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 105.033740][ C0] R13: ffffffff8e097b40 R14: ffffffff9088e6d0 R15: 0000000000000000 [ 105.041719][ C0] ? ct_kernel_exit+0x139/0x190 [ 105.046587][ C0] default_idle+0x13/0x20 [ 105.050913][ C0] default_idle_call+0x6c/0xb0 [ 105.055673][ C0] do_idle+0x38d/0x510 [ 105.059743][ C0] ? __pfx___schedule+0x10/0x10 [ 105.064591][ C0] ? __pfx_do_idle+0x10/0x10 [ 105.069176][ C0] ? find_held_lock+0x2b/0x80 [ 105.073863][ C0] cpu_startup_entry+0x4f/0x60 [ 105.078627][ C0] rest_init+0x16b/0x2b0 [ 105.082867][ C0] ? acpi_subsystem_init+0x133/0x180 [ 105.088146][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 105.093686][ C0] start_kernel+0x3ef/0x4d0 [ 105.098185][ C0] x86_64_start_reservations+0x18/0x30 [ 105.103638][ C0] x86_64_start_kernel+0x130/0x190 [ 105.108747][ C0] common_startup_64+0x13e/0x148 [ 105.113697][ C0] [ 105.160626][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 105.472660][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.472671][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.546322][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.626338][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.791491][ T6257] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 105.801341][ T6257] mmap: syz.0.83 (6257) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.628794][ T6273] syz.1.87 uses obsolete (PF_INET,SOCK_PACKET) [ 106.930904][ T6281] bridge_slave_1: left allmulticast mode [ 106.955245][ T6281] bridge_slave_1: left promiscuous mode [ 106.963141][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.751813][ T6335] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.108767][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 109.212707][ T6346] team0: Port device team_slave_1 removed [ 109.419698][ T6328] Process accounting resumed [ 109.880812][ T6348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.899298][ T6348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.907551][ T6348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.913836][ T6348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.272187][ T6378] FAULT_INJECTION: forcing a failure. [ 110.272187][ T6378] name fail_futex, interval 1, probability 0, space 0, times 1 [ 110.285603][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 110.285623][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.285631][ T6378] Call Trace: [ 110.285636][ T6378] [ 110.285641][ T6378] dump_stack_lvl+0x16c/0x1f0 [ 110.285669][ T6378] should_fail_ex+0x512/0x640 [ 110.285686][ T6378] get_futex_key+0x1d0/0x15f0 [ 110.285707][ T6378] ? __pfx_get_futex_key+0x10/0x10 [ 110.285739][ T6378] futex_wake+0xea/0x530 [ 110.285770][ T6378] ? __pfx_futex_wake+0x10/0x10 [ 110.285805][ T6378] do_futex+0x1e3/0x350 [ 110.285820][ T6378] ? __pfx_do_futex+0x10/0x10 [ 110.285833][ T6378] ? __might_fault+0xe3/0x190 [ 110.285854][ T6378] mm_release+0x24e/0x300 [ 110.285872][ T6378] do_exit+0x69e/0x2bd0 [ 110.285888][ T6378] ? __pfx_do_exit+0x10/0x10 [ 110.285908][ T6378] ? do_raw_spin_lock+0x12c/0x2b0 [ 110.285922][ T6378] ? find_held_lock+0x2b/0x80 [ 110.285941][ T6378] do_group_exit+0xd3/0x2a0 [ 110.285955][ T6378] get_signal+0x2671/0x26d0 [ 110.285979][ T6378] ? __pfx_get_signal+0x10/0x10 [ 110.285998][ T6378] ? do_futex+0x122/0x350 [ 110.286013][ T6378] arch_do_signal_or_restart+0x8f/0x7a0 [ 110.286033][ T6378] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.286055][ T6378] ? fput+0x70/0xf0 [ 110.286068][ T6378] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.286086][ T6378] exit_to_user_mode_loop+0x8c/0x540 [ 110.286104][ T6378] do_syscall_64+0x4ee/0xf80 [ 110.286125][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.286138][ T6378] RIP: 0033:0x7f363078f7c9 [ 110.286158][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.286178][ T6378] RSP: 002b:00007f36316c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.286197][ T6378] RAX: fffffffffffffe00 RBX: 00007f36309e6188 RCX: 00007f363078f7c9 [ 110.286211][ T6378] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f36309e6188 [ 110.286220][ T6378] RBP: 00007f36309e6180 R08: 0000000000000000 R09: 0000000000000000 [ 110.286228][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.286235][ T6378] R13: 00007f36309e6218 R14: 00007ffdc57872a0 R15: 00007ffdc5787388 [ 110.286253][ T6378] [ 111.159005][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.316898][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.114'. [ 111.785657][ T6395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.892785][ T6395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.944988][ T6395] bond0 (unregistering): Released all slaves [ 111.957703][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.962856][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.963730][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.174704][ T6414] FAULT_INJECTION: forcing a failure. [ 112.174704][ T6414] name failslab, interval 1, probability 0, space 0, times 0 [ 112.220329][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT(full) [ 112.220362][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.220375][ T6414] Call Trace: [ 112.220382][ T6414] [ 112.220392][ T6414] dump_stack_lvl+0x16c/0x1f0 [ 112.220429][ T6414] should_fail_ex+0x512/0x640 [ 112.220452][ T6414] ? kmem_cache_alloc_noprof+0x62/0x770 [ 112.220484][ T6414] should_failslab+0xc2/0x120 [ 112.220521][ T6414] kmem_cache_alloc_noprof+0x83/0x770 [ 112.220548][ T6414] ? sk_prot_alloc+0x60/0x2a0 [ 112.220586][ T6414] ? sk_prot_alloc+0x60/0x2a0 [ 112.220612][ T6414] ? find_held_lock+0x2b/0x80 [ 112.220638][ T6414] sk_prot_alloc+0x60/0x2a0 [ 112.220674][ T6414] sk_alloc+0x36/0xe30 [ 112.220702][ T6414] inet6_create+0x381/0x12b0 [ 112.220737][ T6414] ? inet6_create+0x7f/0x12b0 [ 112.220781][ T6414] __sock_create+0x339/0x8a0 [ 112.220824][ T6414] __sys_socket+0x14d/0x260 [ 112.220849][ T6414] ? __pfx___sys_socket+0x10/0x10 [ 112.220871][ T6414] ? xfd_validate_state+0x61/0x180 [ 112.220892][ T6414] ? __sys_setsockopt+0x140/0x1a0 [ 112.220926][ T6414] __x64_sys_socket+0x72/0xb0 [ 112.220947][ T6414] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.220980][ T6414] do_syscall_64+0xcd/0xf80 [ 112.221015][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.221039][ T6414] RIP: 0033:0x7f363078f7c9 [ 112.221059][ T6414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.221081][ T6414] RSP: 002b:00007f3631705038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.221104][ T6414] RAX: ffffffffffffffda RBX: 00007f36309e5fa0 RCX: 00007f363078f7c9 [ 112.221121][ T6414] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 112.221136][ T6414] RBP: 00007f3630813f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.221151][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.221166][ T6414] R13: 00007f36309e6038 R14: 00007f36309e5fa0 R15: 00007ffdc5787388 [ 112.221201][ T6414] [ 112.451454][ T6418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 112.780288][ T6430] aoe: could not set interface list: too many interfaces [ 112.806365][ T6429] aoe: could not set interface list: too many interfaces [ 113.668445][ T6442] input: f¬ as /devices/virtual/input/input7 [ 113.974839][ T6456] openvswitch: netlink: Message has 20 unknown bytes. [ 115.057289][ T6501] syz.2.138 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.874108][ T6518] FAULT_INJECTION: forcing a failure. [ 115.874108][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 115.926398][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(full) [ 115.926432][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.926446][ T6518] Call Trace: [ 115.926454][ T6518] [ 115.926464][ T6518] dump_stack_lvl+0x16c/0x1f0 [ 115.926504][ T6518] should_fail_ex+0x512/0x640 [ 115.926530][ T6518] ? kmem_cache_alloc_noprof+0x62/0x770 [ 115.926563][ T6518] should_failslab+0xc2/0x120 [ 115.926598][ T6518] kmem_cache_alloc_noprof+0x83/0x770 [ 115.926626][ T6518] ? __anon_vma_prepare+0x344/0x5e0 [ 115.926658][ T6518] ? __anon_vma_prepare+0x344/0x5e0 [ 115.926682][ T6518] __anon_vma_prepare+0x344/0x5e0 [ 115.926705][ T6518] ? __pfx___pte_alloc+0x10/0x10 [ 115.926740][ T6518] __vmf_anon_prepare+0x11c/0x240 [ 115.926776][ T6518] do_anonymous_page+0x59b/0x2190 [ 115.926801][ T6518] ? do_raw_spin_unlock+0x172/0x230 [ 115.926831][ T6518] ? __pmd_alloc+0x6aa/0x9c0 [ 115.926867][ T6518] __handle_mm_fault+0x1ecf/0x2bb0 [ 115.926902][ T6518] ? __pfx___handle_mm_fault+0x10/0x10 [ 115.926958][ T6518] handle_mm_fault+0x3fe/0xad0 [ 115.926990][ T6518] __get_user_pages+0x54e/0x3590 [ 115.927039][ T6518] ? __pfx___get_user_pages+0x10/0x10 [ 115.927082][ T6518] populate_vma_page_range+0x267/0x3f0 [ 115.927122][ T6518] ? __pfx_populate_vma_page_range+0x10/0x10 [ 115.927160][ T6518] ? __pfx_find_vma_intersection+0x10/0x10 [ 115.927201][ T6518] __mm_populate+0x1d8/0x380 [ 115.927234][ T6518] ? __pfx___mm_populate+0x10/0x10 [ 115.927263][ T6518] ? up_write+0x282/0x4e0 [ 115.927285][ T6518] vm_mmap_pgoff+0x37f/0x470 [ 115.927313][ T6518] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 115.927344][ T6518] ? __x64_sys_futex+0x1e0/0x4c0 [ 115.927363][ T6518] ? __x64_sys_futex+0x1e9/0x4c0 [ 115.927387][ T6518] ksys_mmap_pgoff+0x7d/0x5c0 [ 115.927412][ T6518] ? xfd_validate_state+0x61/0x180 [ 115.927428][ T6518] ? __pfx_do_writev+0x10/0x10 [ 115.927454][ T6518] __x64_sys_mmap+0x125/0x190 [ 115.927476][ T6518] do_syscall_64+0xcd/0xf80 [ 115.927504][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.927522][ T6518] RIP: 0033:0x7fddacd8f7c9 [ 115.927538][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.927555][ T6518] RSP: 002b:00007fddadc72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 115.927573][ T6518] RAX: ffffffffffffffda RBX: 00007fddacfe5fa0 RCX: 00007fddacd8f7c9 [ 115.927585][ T6518] RDX: 00000000000000df RSI: 0000000000400009 RDI: 0000000000000000 [ 115.927596][ T6518] RBP: 00007fddace13f91 R08: 0000000000000002 R09: 0000000000008000 [ 115.927607][ T6518] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 115.927617][ T6518] R13: 00007fddacfe6038 R14: 00007fddacfe5fa0 R15: 00007ffcad132608 [ 115.927645][ T6518] [ 116.449496][ T6539] ima: policy update failed [ 116.454194][ T30] audit: type=1802 audit(1766253492.885:4): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.144" res=0 errno=0 [ 116.456136][ T6539] netlink: 25 bytes leftover after parsing attributes in process `syz.0.144'. [ 117.065945][ T6562] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.069267][ T6610] vhci_hcd vhci_hcd.2: invalid port number 16 [ 119.093622][ T6610] vhci_hcd vhci_hcd.2: invalid port number 16 [ 121.809254][ T5951] smpboot: CPU 1 is now offline [ 121.999712][ T6705] netlink: 428 bytes leftover after parsing attributes in process `syz.0.170'. [ 122.101678][ T6705] netlink: 217 bytes leftover after parsing attributes in process `syz.0.170'. [ 122.926911][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.127278][ T6770] FAULT_INJECTION: forcing a failure. [ 124.127278][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 124.241371][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT(full) [ 124.241393][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.241402][ T6770] Call Trace: [ 124.241407][ T6770] [ 124.241413][ T6770] dump_stack_lvl+0x16c/0x1f0 [ 124.241438][ T6770] should_fail_ex+0x512/0x640 [ 124.241453][ T6770] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 124.241471][ T6770] should_failslab+0xc2/0x120 [ 124.241491][ T6770] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 124.241506][ T6770] ? dquot_alloc_inode+0x51b/0xb90 [ 124.241520][ T6770] ? __dquot_initialize+0x299/0xd50 [ 124.241534][ T6770] ? __d_alloc+0x35/0xa80 [ 124.241549][ T6770] ? __d_alloc+0x35/0xa80 [ 124.241559][ T6770] __d_alloc+0x35/0xa80 [ 124.241572][ T6770] d_alloc_pseudo+0x1c/0xc0 [ 124.241587][ T6770] alloc_file_pseudo+0xcf/0x230 [ 124.241602][ T6770] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 124.241632][ T6770] __shmem_file_setup+0x1a8/0x350 [ 124.241658][ T6770] shmem_zero_setup+0x93/0x1b0 [ 124.241675][ T6770] __mmap_region+0x2271/0x2a00 [ 124.241693][ T6770] ? __lock_acquire+0x436/0x2890 [ 124.241705][ T6770] ? __pfx___mmap_region+0x10/0x10 [ 124.241726][ T6770] ? lock_acquire+0x179/0x330 [ 124.241744][ T6770] ? finish_task_switch.isra.0+0x207/0xbd0 [ 124.241796][ T6770] ? rcu_is_watching+0x12/0xc0 [ 124.241817][ T6770] mmap_region+0x1ab/0x3f0 [ 124.241832][ T6770] ? __get_unmapped_area+0x267/0x3f0 [ 124.241852][ T6770] do_mmap+0xa3e/0x1210 [ 124.241873][ T6770] ? __pfx_do_mmap+0x10/0x10 [ 124.241892][ T6770] ? __pfx_down_write_killable+0x10/0x10 [ 124.241909][ T6770] vm_mmap_pgoff+0x29e/0x470 [ 124.241930][ T6770] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 124.241951][ T6770] ? __x64_sys_futex+0x1e0/0x4c0 [ 124.241965][ T6770] ? __x64_sys_futex+0x1e9/0x4c0 [ 124.241982][ T6770] ksys_mmap_pgoff+0x7d/0x5c0 [ 124.241998][ T6770] ? xfd_validate_state+0x61/0x180 [ 124.242010][ T6770] ? __pfx_ksys_write+0x10/0x10 [ 124.242029][ T6770] __x64_sys_mmap+0x125/0x190 [ 124.242044][ T6770] do_syscall_64+0xcd/0xf80 [ 124.242064][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.242077][ T6770] RIP: 0033:0x7fe11918f7c9 [ 124.242089][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.242101][ T6770] RSP: 002b:00007fe1173f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.242114][ T6770] RAX: ffffffffffffffda RBX: 00007fe1193e5fa0 RCX: 00007fe11918f7c9 [ 124.242123][ T6770] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 124.242131][ T6770] RBP: 00007fe119213f91 R08: fffffffffffffffa R09: 0000000000008000 [ 124.242140][ T6770] R10: 0800000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 124.242148][ T6770] R13: 00007fe1193e6038 R14: 00007fe1193e5fa0 R15: 00007ffcbadf5e08 [ 124.242167][ T6770] [ 124.911998][ T6773] netlink: 'syz.2.180': attribute type 33 has an invalid length. [ 124.971874][ T6773] netlink: 322 bytes leftover after parsing attributes in process `syz.2.180'. [ 125.309749][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.186'. [ 125.447338][ T6800] capability: warning: `syz.2.185' uses 32-bit capabilities (legacy support in use) [ 127.900137][ T6875] futex_wake_op: syz.1.199 tries to shift op by -2048; fix this program [ 128.860498][ T6889] netlink: 354 bytes leftover after parsing attributes in process `syz.1.202'. [ 128.911751][ T6890] netlink: 354 bytes leftover after parsing attributes in process `syz.1.202'. [ 129.761219][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 130.556360][ T6935] vivid-007: ================= START STATUS ================= [ 130.588753][ T6935] vivid-007: Generate PTS: true [ 130.593763][ T6935] vivid-007: Generate SCR: true [ 130.638176][ T6935] tpg source WxH: 320x240 (Y'CbCr) [ 130.684433][ T6935] tpg field: 1 [ 130.694542][ T6935] tpg crop: (0,0)/320x240 [ 130.713823][ T6935] tpg compose: (0,0)/320x240 [ 130.763953][ T6935] tpg colorspace: 8 [ 130.816452][ T6935] tpg transfer function: 0/0 [ 130.821072][ T6935] tpg Y'CbCr encoding: 0/0 [ 130.864487][ T6935] tpg quantization: 0/0 [ 130.915503][ T6935] tpg RGB range: 0/2 [ 130.929892][ T6935] vivid-007: ================== END STATUS ================== [ 132.158143][ T6990] netlink: 346 bytes leftover after parsing attributes in process `syz.0.221'. [ 132.504054][ T6999] hub 1-0:1.0: USB hub found [ 132.666421][ T6999] hub 1-0:1.0: 1 port detected [ 132.910486][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.927198][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.596489][ T5845] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 135.674611][ T7068] FAULT_INJECTION: forcing a failure. [ 135.674611][ T7068] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.738564][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.0.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.738597][ T7068] Tainted: [L]=SOFTLOCKUP [ 135.738602][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.738610][ T7068] Call Trace: [ 135.738615][ T7068] [ 135.738621][ T7068] dump_stack_lvl+0x16c/0x1f0 [ 135.738646][ T7068] should_fail_ex+0x512/0x640 [ 135.738670][ T7068] get_futex_key+0x1d0/0x15f0 [ 135.738689][ T7068] ? __pfx_get_futex_key+0x10/0x10 [ 135.738703][ T7068] ? find_held_lock+0x2b/0x80 [ 135.738726][ T7068] futex_wake+0xea/0x530 [ 135.738745][ T7068] ? __pfx_futex_wake+0x10/0x10 [ 135.738764][ T7068] ? __lock_acquire+0x436/0x2890 [ 135.738781][ T7068] do_futex+0x1e3/0x350 [ 135.738796][ T7068] ? __pfx_do_futex+0x10/0x10 [ 135.738811][ T7068] ? find_held_lock+0x2b/0x80 [ 135.738829][ T7068] __x64_sys_futex+0x1e0/0x4c0 [ 135.738845][ T7068] ? __fget_files+0x20e/0x3c0 [ 135.738862][ T7068] ? __pfx___x64_sys_futex+0x10/0x10 [ 135.738879][ T7068] ? fdget+0x187/0x210 [ 135.738898][ T7068] do_syscall_64+0xcd/0xf80 [ 135.738918][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.738931][ T7068] RIP: 0033:0x7fddacd8f7c9 [ 135.738943][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.738955][ T7068] RSP: 002b:00007fddadc510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.738967][ T7068] RAX: ffffffffffffffda RBX: 00007fddacfe6098 RCX: 00007fddacd8f7c9 [ 135.738976][ T7068] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fddacfe609c [ 135.738983][ T7068] RBP: 00007fddacfe6090 R08: 00007fddadc73000 R09: 0000000000000000 [ 135.738991][ T7068] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 135.738999][ T7068] R13: 00007fddacfe6128 R14: 00007ffcad132520 R15: 00007ffcad132608 [ 135.739016][ T7068] [ 136.170930][ T7081] netlink: 504 bytes leftover after parsing attributes in process `syz.0.238'. [ 138.155651][ T7129] FAULT_INJECTION: forcing a failure. [ 138.155651][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 138.181870][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.3.249 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.181895][ T7129] Tainted: [L]=SOFTLOCKUP [ 138.181900][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.181908][ T7129] Call Trace: [ 138.181914][ T7129] [ 138.181920][ T7129] dump_stack_lvl+0x16c/0x1f0 [ 138.181945][ T7129] should_fail_ex+0x512/0x640 [ 138.181961][ T7129] ? __kmalloc_cache_noprof+0x5f/0x800 [ 138.181978][ T7129] should_failslab+0xc2/0x120 [ 138.181998][ T7129] __kmalloc_cache_noprof+0x80/0x800 [ 138.182011][ T7129] ? do_raw_spin_unlock+0x172/0x230 [ 138.182027][ T7129] ? snd_mixer_oss_open+0x11d/0x300 [ 138.182045][ T7129] ? snd_card_file_add+0x26e/0x340 [ 138.182059][ T7129] ? snd_mixer_oss_open+0x11d/0x300 [ 138.182075][ T7129] snd_mixer_oss_open+0x11d/0x300 [ 138.182092][ T7129] ? __pfx_snd_mixer_oss_open+0x10/0x10 [ 138.182110][ T7129] soundcore_open+0x40c/0x580 [ 138.182129][ T7129] ? __pfx_soundcore_open+0x10/0x10 [ 138.182146][ T7129] chrdev_open+0x234/0x6a0 [ 138.182173][ T7129] ? __pfx_chrdev_open+0x10/0x10 [ 138.182193][ T7129] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 138.182216][ T7129] do_dentry_open+0x748/0x1590 [ 138.182235][ T7129] ? __pfx_chrdev_open+0x10/0x10 [ 138.182258][ T7129] vfs_open+0x82/0x3f0 [ 138.182274][ T7129] path_openat+0x2078/0x3140 [ 138.182298][ T7129] ? __pfx_path_openat+0x10/0x10 [ 138.182322][ T7129] do_filp_open+0x20b/0x470 [ 138.182340][ T7129] ? __pfx_do_filp_open+0x10/0x10 [ 138.182371][ T7129] ? alloc_fd+0x471/0x7d0 [ 138.182393][ T7129] do_sys_openat2+0x121/0x290 [ 138.182408][ T7129] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.182429][ T7129] __x64_sys_openat+0x174/0x210 [ 138.182443][ T7129] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.182464][ T7129] do_syscall_64+0xcd/0xf80 [ 138.182484][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.182497][ T7129] RIP: 0033:0x7fe11918f7c9 [ 138.182509][ T7129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.182522][ T7129] RSP: 002b:00007fe1173f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.182534][ T7129] RAX: ffffffffffffffda RBX: 00007fe1193e5fa0 RCX: 00007fe11918f7c9 [ 138.182543][ T7129] RDX: 0000000000000902 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 138.182552][ T7129] RBP: 00007fe119213f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.182560][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.182568][ T7129] R13: 00007fe1193e6038 R14: 00007fe1193e5fa0 R15: 00007ffcbadf5e08 [ 138.182587][ T7129] [ 140.062779][ T7159] Process accounting paused [ 140.193133][ T7177] FAULT_INJECTION: forcing a failure. [ 140.193133][ T7177] name failslab, interval 1, probability 0, space 0, times 0 [ 140.232238][ T7177] CPU: 0 UID: 0 PID: 7177 Comm: syz.2.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.232263][ T7177] Tainted: [L]=SOFTLOCKUP [ 140.232268][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.232277][ T7177] Call Trace: [ 140.232281][ T7177] [ 140.232288][ T7177] dump_stack_lvl+0x16c/0x1f0 [ 140.232315][ T7177] should_fail_ex+0x512/0x640 [ 140.232330][ T7177] ? __kmalloc_cache_noprof+0x5f/0x800 [ 140.232347][ T7177] should_failslab+0xc2/0x120 [ 140.232369][ T7177] __kmalloc_cache_noprof+0x80/0x800 [ 140.232383][ T7177] ? snd_pcm_oss_change_params_locked+0x211/0x3ab0 [ 140.232408][ T7177] ? snd_pcm_oss_change_params_locked+0x211/0x3ab0 [ 140.232428][ T7177] snd_pcm_oss_change_params_locked+0x211/0x3ab0 [ 140.232449][ T7177] ? trace_contention_end+0xd5/0x110 [ 140.232463][ T7177] ? __mutex_lock+0x27b/0x1ca0 [ 140.232483][ T7177] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 140.232498][ T7177] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 140.232519][ T7177] ? __pfx___mutex_lock+0x10/0x10 [ 140.232544][ T7177] ? __fsnotify_parent+0x24b/0xcc0 [ 140.232570][ T7177] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 140.232583][ T7177] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 140.232595][ T7177] snd_pcm_oss_sync+0x1de/0x840 [ 140.232607][ T7177] ? kmem_cache_free+0x171/0x770 [ 140.232624][ T7177] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 140.232636][ T7177] snd_pcm_oss_release+0x28b/0x310 [ 140.232650][ T7177] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 140.232662][ T7177] __fput+0x402/0xb70 [ 140.232680][ T7177] task_work_run+0x150/0x240 [ 140.232694][ T7177] ? __pfx_task_work_run+0x10/0x10 [ 140.232707][ T7177] ? __do_sys_close_range+0x278/0x730 [ 140.232731][ T7177] exit_to_user_mode_loop+0xfb/0x540 [ 140.232749][ T7177] do_syscall_64+0x4ee/0xf80 [ 140.232769][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.232782][ T7177] RIP: 0033:0x7f363078f7c9 [ 140.232794][ T7177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.232807][ T7177] RSP: 002b:00007f3631705038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 140.232820][ T7177] RAX: 0000000000000000 RBX: 00007f36309e5fa0 RCX: 00007f363078f7c9 [ 140.232828][ T7177] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 140.232835][ T7177] RBP: 00007f3630813f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.232843][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.232850][ T7177] R13: 00007f36309e6038 R14: 00007f36309e5fa0 R15: 00007ffdc5787388 [ 140.232869][ T7177] [ 141.396500][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 141.911780][ T7222] random: crng reseeded on system resumption [ 141.972500][ T7224] ======================================================= [ 141.972500][ T7224] WARNING: The mand mount option has been deprecated and [ 141.972500][ T7224] and is ignored by this kernel. Remove the mand [ 141.972500][ T7224] option from the mount to silence this warning. [ 141.972500][ T7224] ======================================================= [ 142.994471][ T7272] netlink: 246 bytes leftover after parsing attributes in process `syz.1.277'. [ 143.112200][ T7265] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 143.188984][ T7265] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 143.235504][ T7267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.269418][ T7265] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 143.303039][ T7265] page_type: f5(slab) [ 143.310651][ T7265] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 143.342605][ T7265] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 143.374214][ T7265] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 143.425352][ T7265] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 143.472923][ T7265] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 143.514604][ T7265] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 143.563156][ T7265] page dumped because: unmovable page [ 143.598581][ T7265] page_owner tracks the page as allocated [ 143.620646][ T7265] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5215, tgid 5215 (udevadm), ts 35235415950, free_ts 28753425558 [ 143.681634][ T7265] post_alloc_hook+0x1af/0x220 [ 143.694924][ T7265] get_page_from_freelist+0xd0b/0x31a0 [ 143.708298][ T7265] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 143.721580][ T7265] alloc_pages_mpol+0x1fb/0x550 [ 143.732281][ T7265] new_slab+0x2c3/0x430 [ 143.743293][ T7265] ___slab_alloc+0xe18/0x1c90 [ 143.753635][ T7265] __slab_alloc.constprop.0+0x63/0x110 [ 143.765860][ T7265] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 143.777543][ T7265] alloc_inode+0xc3/0x240 [ 143.788292][ T7265] iget_locked+0x1d9/0x6d0 [ 143.798481][ T7265] kernfs_get_inode+0x46/0x470 [ 143.808570][ T7265] kernfs_iop_lookup+0x1a7/0x2d0 [ 143.820151][ T7265] __lookup_slow+0x251/0x460 [ 143.831128][ T7265] lookup_slow+0x50/0x70 [ 143.842909][ T7265] path_lookupat+0x5e9/0xc40 [ 143.852374][ T7265] filename_lookup+0x224/0x5f0 [ 143.862901][ T7265] page last free pid 1 tgid 1 stack trace: [ 143.875975][ T7265] __free_frozen_pages+0x7df/0x1170 [ 143.886798][ T7265] free_contig_range+0x183/0x4a0 [ 143.897478][ T7265] destroy_args+0xb95/0x14e0 [ 143.908848][ T7265] debug_vm_pgtable+0x2220/0x38d0 [ 143.919680][ T7265] do_one_initcall+0x123/0x680 [ 143.931095][ T7265] kernel_init_freeable+0x5c8/0x920 [ 143.944273][ T7265] kernel_init+0x1c/0x2b0 [ 143.957806][ T7265] ret_from_fork+0x983/0xb10 [ 143.967923][ T7265] ret_from_fork_asm+0x1a/0x30 [ 144.956890][ T7316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.983759][ T7316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.032304][ T7316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.060973][ T7316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.099906][ T7316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.722166][ T7340] FAULT_INJECTION: forcing a failure. [ 145.722166][ T7340] name failslab, interval 1, probability 0, space 0, times 0 [ 145.759484][ T7344] random: crng reseeded on system resumption [ 145.841162][ T7335] zswap: compressor û not available [ 145.894810][ T7340] CPU: 0 UID: 0 PID: 7340 Comm: syz.1.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.894835][ T7340] Tainted: [L]=SOFTLOCKUP [ 145.894840][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.894848][ T7340] Call Trace: [ 145.894853][ T7340] [ 145.894859][ T7340] dump_stack_lvl+0x16c/0x1f0 [ 145.894884][ T7340] should_fail_ex+0x512/0x640 [ 145.894898][ T7340] ? __kmalloc_cache_noprof+0x5f/0x800 [ 145.894916][ T7340] should_failslab+0xc2/0x120 [ 145.894935][ T7340] __kmalloc_cache_noprof+0x80/0x800 [ 145.894950][ T7340] ? vb2_vmalloc_alloc+0xf9/0x410 [ 145.894968][ T7340] ? vb2_vmalloc_alloc+0xf9/0x410 [ 145.894982][ T7340] vb2_vmalloc_alloc+0xf9/0x410 [ 145.894997][ T7340] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 145.895012][ T7340] __vb2_queue_alloc+0x8c9/0x1280 [ 145.895035][ T7340] vb2_core_reqbufs+0xa90/0xfe0 [ 145.895053][ T7340] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 145.895081][ T7340] __vb2_init_fileio+0x3f1/0x1100 [ 145.895095][ T7340] ? vb2_fop_read+0xe6/0x3e0 [ 145.895112][ T7340] __vb2_perform_fileio+0x9c2/0x1660 [ 145.895132][ T7340] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 145.895152][ T7340] vb2_fop_read+0x215/0x3e0 [ 145.895168][ T7340] v4l2_read+0x229/0x360 [ 145.895185][ T7340] ? __pfx_v4l2_read+0x10/0x10 [ 145.895202][ T7340] vfs_read+0x1e4/0xcf0 [ 145.895225][ T7340] ? __pfx_vfs_read+0x10/0x10 [ 145.895241][ T7340] ? find_held_lock+0x2b/0x80 [ 145.895258][ T7340] ? __fget_files+0x204/0x3c0 [ 145.895279][ T7340] ? __fget_files+0x20e/0x3c0 [ 145.895301][ T7340] ksys_read+0x12a/0x250 [ 145.895318][ T7340] ? __pfx_ksys_read+0x10/0x10 [ 145.895341][ T7340] do_syscall_64+0xcd/0xf80 [ 145.895362][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.895376][ T7340] RIP: 0033:0x7fa6d2f8f7c9 [ 145.895388][ T7340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.895400][ T7340] RSP: 002b:00007fa6d3e9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.895413][ T7340] RAX: ffffffffffffffda RBX: 00007fa6d31e6180 RCX: 00007fa6d2f8f7c9 [ 145.895422][ T7340] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 145.895429][ T7340] RBP: 00007fa6d3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 145.895437][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.895444][ T7340] R13: 00007fa6d31e6218 R14: 00007fa6d31e6180 R15: 00007ffcdb5b2ff8 [ 145.895463][ T7340] [ 146.996266][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.076283][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.082352][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.148953][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.837385][ T7404] Invalid ELF header magic: != ELF [ 149.066301][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.124557][ T7421] tc_dump_action: action bad kind [ 149.968509][ T7457] synth uevent: /devices/virtual/misc/iommu: unknown uevent action string [ 150.106164][ T7457] misc iommu: uevent: failed to send synthetic uevent: -22 [ 152.225039][ T30] audit: type=1800 audit(4294967303.811:5): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.323" name="dbroot" dev="configfs" ino=16858 res=0 errno=0 [ 153.345817][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 153.967353][ T7538] hub 1-0:1.0: USB hub found [ 153.995834][ T7538] hub 1-0:1.0: 1 port detected [ 154.391314][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.335'. [ 154.539173][ T7544] Invalid ELF header magic: != ELF [ 155.240478][ T7565] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000081: 0000 [#1] SMP KASAN PTI [ 155.252373][ T7565] KASAN: null-ptr-deref in range [0x0000000000000408-0x000000000000040f] [ 155.260774][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.3.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.271534][ T7565] Tainted: [L]=SOFTLOCKUP [ 155.275844][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.285877][ T7565] RIP: 0010:status_show+0x30f/0x5d0 [ 155.291068][ T7565] Code: 03 80 3c 02 00 0f 85 b3 02 00 00 48 8b 9b 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 08 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 94 02 00 00 4c 8b b3 08 04 00 00 c1 e5 04 41 bc [ 155.310661][ T7565] RSP: 0018:ffffc9000b0dfac0 EFLAGS: 00010206 [ 155.316715][ T7565] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c64b000 [ 155.324663][ T7565] RDX: 0000000000000081 RSI: ffffffff87858fce RDI: 0000000000000408 [ 155.332616][ T7565] RBP: 000000000000000f R08: 0000000000000005 R09: 0000000000000000 [ 155.340655][ T7565] R10: 000000000000000f R11: 2020766564206470 R12: ffff88803339802d [ 155.348612][ T7565] R13: ffffc9000b0dfb10 R14: ffff888033398000 R15: ffff8880776d2df8 [ 155.356683][ T7565] FS: 00007fe1173f66c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 155.365613][ T7565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.372202][ T7565] CR2: 0000001b31718ff8 CR3: 000000007c716000 CR4: 00000000003526f0 [ 155.380168][ T7565] Call Trace: [ 155.383429][ T7565] [ 155.386345][ T7565] ? __pfx_status_show+0x10/0x10 [ 155.391267][ T7565] ? __pfx_status_show+0x10/0x10 [ 155.396184][ T7565] dev_attr_show+0x56/0xe0 [ 155.400588][ T7565] ? __pfx_dev_attr_show+0x10/0x10 [ 155.405679][ T7565] sysfs_kf_seq_show+0x216/0x3e0 [ 155.410600][ T7565] seq_read_iter+0x50e/0x12d0 [ 155.415262][ T7565] kernfs_fop_read_iter+0x46c/0x610 [ 155.420448][ T7565] ? rw_verify_area+0xcf/0x6c0 [ 155.425202][ T7565] vfs_read+0x8bf/0xcf0 [ 155.429359][ T7565] ? __pfx_vfs_read+0x10/0x10 [ 155.434041][ T7565] ksys_read+0x12a/0x250 [ 155.438270][ T7565] ? __pfx_ksys_read+0x10/0x10 [ 155.443032][ T7565] do_syscall_64+0xcd/0xf80 [ 155.447633][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.453521][ T7565] RIP: 0033:0x7fe11918f7c9 [ 155.457922][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.477522][ T7565] RSP: 002b:00007fe1173f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.485917][ T7565] RAX: ffffffffffffffda RBX: 00007fe1193e5fa0 RCX: 00007fe11918f7c9 [ 155.493868][ T7565] RDX: 0000000000000049 RSI: 0000200000000200 RDI: 0000000000000006 [ 155.501817][ T7565] RBP: 00007fe119213f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.509767][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.517732][ T7565] R13: 00007fe1193e6038 R14: 00007fe1193e5fa0 R15: 00007ffcbadf5e08 [ 155.525700][ T7565] [ 155.528704][ T7565] Modules linked in: [ 155.533988][ T7565] ---[ end trace 0000000000000000 ]--- [ 155.819389][ T7565] RIP: 0010:status_show+0x30f/0x5d0 [ 155.831432][ T7565] Code: 03 80 3c 02 00 0f 85 b3 02 00 00 48 8b 9b 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 08 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 94 02 00 00 4c 8b b3 08 04 00 00 c1 e5 04 41 bc [ 155.875417][ T7565] RSP: 0018:ffffc9000b0dfac0 EFLAGS: 00010206 [ 155.889653][ T7565] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c64b000 [ 155.904954][ T7565] RDX: 0000000000000081 RSI: ffffffff87858fce RDI: 0000000000000408 [ 155.913204][ T7565] RBP: 000000000000000f R08: 0000000000000005 R09: 0000000000000000 [ 155.924118][ T7565] R10: 000000000000000f R11: 2020766564206470 R12: ffff88803339802d [ 155.932171][ T7565] R13: ffffc9000b0dfb10 R14: ffff888033398000 R15: ffff8880776d2df8 [ 155.940603][ T7565] FS: 00007fe1173f66c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 155.952354][ T7565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.960095][ T7565] CR2: 0000001b316fcff8 CR3: 000000007c716000 CR4: 00000000003526f0 [ 155.968471][ T7565] Kernel panic - not syncing: Fatal exception [ 155.974580][ T7565] Kernel Offset: disabled [ 155.978986][ T7565] Rebooting in 86400 seconds..