last executing test programs: 24.749318083s ago: executing program 1 (id=2): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) (async) r1 = openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x4080, 0x0) ioctl$auto_FS_IOC_GETVERSION2(r1, 0x80087601, &(0x7f0000000100)=0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) (async) r2 = io_uring_setup$auto(0x8, 0x0) io_uring_register$auto(0x2, 0xb, 0x0, 0x7f) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) (async) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) read$auto_mon_fops_binary_mon_bin(r2, &(0x7f0000000140)=""/113, 0x71) (async) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) madvise$auto(0x0, 0x2003f0, 0x15) 23.341038092s ago: executing program 1 (id=8): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x6, 0x6, 0x1ff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x3, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) madvise$auto(0xffffffffffff8000, 0x5, 0x9) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy8/hwsim/dfs_simulate_radar\x00', 0x5040, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) sendmsg$auto_SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pidfd_getfd$auto(r1, r1, 0xf4a6) 21.463866447s ago: executing program 1 (id=12): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) write$auto_tun_fops_tun(0xffffffffffffffff, &(0x7f0000000040)="3cc192647411f92010190da9d2065bd64795b786f646ca9b48b1370d182898475d4a4d4582af776f6e15ed95fed3df2c6e2c9a3f82ed5f80b59482385b4c2cf248394ad828ab07e5d870c5d9dc7975f8eafc38dcb5e24349969653ca2bd7eb19484f16a75fb506547231a4b76b8d47e26797f460", 0x74) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdb\xfd=x\x13\x01V\xd4\xee\xc2\xdd\xa7\v$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z\b\x00\x00\x00\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\x93\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00', 0x1) listen$auto(0x3, 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x2, 0x38) madvise$auto(0x9, 0xffffffffffff0001, 0x15) prctl$auto(0x103b, 0x1, 0x4, 0x8000000000000001, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x288401, 0x0) read$auto(r2, 0x0, 0x1f40) pwrite64$auto(r2, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x2) ioctl$auto(0x3, 0x400454ca, 0x38) prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x42, 0x0) 12.724870066s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r1, &(0x7f0000000640)=""/188, 0xbc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r2, 0x0, 0x1ff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x400a844) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x280009, 0xb, 0x8000000008011, r4, 0x0) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0xdeaf, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000f7dbdf250100003f06000200010100000500070058000000080009000500000a000800000014001f00000000000000000000000000000000011400200000000000000000000000ffffffffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 10.326471004s ago: executing program 2 (id=40): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) msgctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000000240)={{0xffffff01, 0xee01, 0xee01, 0x4, 0x3d6, 0xab, 0x3}, &(0x7f0000000080)=0xf6, &(0x7f0000000100)=0x1, 0x7, 0x7f, 0x1, 0x6, 0x3, 0x0, 0x8, 0x438, @raw=0x7, @raw=0xb}) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0x100000001, 0x9, r0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xffffffffffff59de, 0x2) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109040, 0x0) ioctl$auto_FS_IOC_RESVSP(r2, 0x40305828, 0x4) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r3 = socket(0x25, 0x1, 0x0) setsockopt$auto(r3, 0x111, 0x7f, 0x0, 0x400) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) 8.511521507s ago: executing program 2 (id=46): ioperm$auto(0x1, 0x1004, 0x7f) socket(0xa, 0x3, 0x3b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, r0, 0x200) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) iopl$auto(0x2) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x400601, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = prctl$auto_SIGCONT(0x80000001, 0x12, 0x0, 0x3ff, 0x2) pread64$auto(r2, &(0x7f00000000c0)='/d{\xaa/sD1c\x004\xdb\x02\xe0\xd2Z\xac{\xdc\xfc^\xcb\x06\xb0\xee3\xfb\x90\x87{s6\x1b\xa0|\xb2 pL02\x06', 0x9, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x16) madvise$auto(0x9, 0x80, 0x1958) r3 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0xffffffffffffffff, 0x6, 0x8000) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x10000000000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x101000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) 7.475366692s ago: executing program 0 (id=49): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x20042, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mtd0ro\x00', 0x40c501, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000300)={{0x5, 0xff, 0x8, 0x5}, "f046533965f2d2059bbea6b5cff49bb015a4173172741242e9db0122dbaa888eefcb2b04b258c8bd34acb6e7258248de67d8c783f95c8785a5c4f108f212beddf8e4b8ed75cfc38f8b2af849aba335bd", 0x8}) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(r2, &(0x7f00000003c0)={&(0x7f0000000380)="50abb2f2d190ee7b450466ee1ee13b0a04487ede5ecb640ef7606c50f473a8af3899b54ca5dd59", 0xfffffffffffffffa}, 0x8) ioctl$auto(r2, 0x8926, r2) shmctl$auto_SHM_STAT(0x4, 0xd, &(0x7f00000000c0)={{0x0, 0xee00, 0xee00, 0x8, 0xc, 0xffffffff, 0xaf}, 0x5, 0xc, 0x1000, 0x600000000, @raw=0x1, @inferred, 0x4, 0x0, &(0x7f0000000000)="c7f484d53af8b0581577d31f202b688fe67d4b2ad5348cdaed10c270671022a59ab2ad753eab9fe1d895f0ea79971ffef7c58c663009334f052275cd156a8d1b483bc948565a76f5bf62dc827b6b82f6867c472211e2fd44a2c0669cbb975dc0a4198ae16619b518dd7be3bf2b4b2da67d4414", &(0x7f0000000080)="5e6d0d4a25440ce769de9a"}) msgctl$auto(0x6, 0xd32, &(0x7f00000001c0)={{0x0, 0x0, 0xee01, 0x4, 0x8, 0x8}, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x9, 0x7, 0x2, 0x6, 0x7, 0x6, 0x3, 0x1000, 0x5, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) fstat$auto(r0, &(0x7f0000000240)={0x3, 0x37bf, 0x4, 0x5, r4, r5, 0x0, 0xfffffffffffffffe, 0x2, 0x6, 0x5, 0x4, 0x81, 0x0, 0x4eb, 0xd04, 0x1}) 7.169872647s ago: executing program 0 (id=51): r0 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f00000010c0), 0x40100, 0x0) setsockopt$auto_SO_MARK(r0, 0x1, 0x24, &(0x7f0000001100)='\\^\x00', 0x8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) write$auto(r2, &(0x7f0000000500)='%[.[`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa3\xa7\xf2M\xd1(h\xa51T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x6) unshare$auto(0xffffffffffffffff) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) socket(0x18, 0x5, 0x2) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) socket(0x28, 0x5, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card2\x00', 0x8800, 0x0) ioctl$auto(r5, 0x64c7, 0x1e2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x2, 0x8, 0x3, 0x3) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x7) sendfile$auto(r6, r6, 0x0, 0x4) socketpair$auto(0xfffffffe, 0x1, 0x3, 0x0) socket(0xa, 0x5, 0x84) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001140)=&(0x7f0000001080)='\x8c\x82\xa5') 6.328450949s ago: executing program 32 (id=12): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) write$auto_tun_fops_tun(0xffffffffffffffff, &(0x7f0000000040)="3cc192647411f92010190da9d2065bd64795b786f646ca9b48b1370d182898475d4a4d4582af776f6e15ed95fed3df2c6e2c9a3f82ed5f80b59482385b4c2cf248394ad828ab07e5d870c5d9dc7975f8eafc38dcb5e24349969653ca2bd7eb19484f16a75fb506547231a4b76b8d47e26797f460", 0x74) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdb\xfd=x\x13\x01V\xd4\xee\xc2\xdd\xa7\v$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z\b\x00\x00\x00\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\x93\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00', 0x1) listen$auto(0x3, 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x2, 0x38) madvise$auto(0x9, 0xffffffffffff0001, 0x15) prctl$auto(0x103b, 0x1, 0x4, 0x8000000000000001, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x288401, 0x0) read$auto(r2, 0x0, 0x1f40) pwrite64$auto(r2, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x2) ioctl$auto(0x3, 0x400454ca, 0x38) prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x42, 0x0) 6.295285588s ago: executing program 3 (id=54): socketcall$auto_SYS_SEND(0x9, &(0x7f0000000000)=0x3888) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) socket(0x1d, 0x2, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/tty/ptyc8/power/runtime_suspended_time\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) r2 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000180)={@_si_pad}, 0xedd8, &(0x7f00000002c0)={{0x3, 0x1e}, {0x80000001, 0x1a2e5150}, 0x5, 0x6, 0x1, 0x6, 0x6, 0x4, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x7, 0x10001, 0x8001}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x7fff, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @inferred=r2, @enumerated={0x8001, 0x1, "71c50495875fda8c62df9c4ab3f3008e01480fea07617a177302693a82a9c321a2721a69f938599440e0511333b8446367f732b02f3c559db123b30ed62f6042", 0x9, 0x18}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) read$auto(r3, 0x0, 0x39b8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1ff, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x5d) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x9, 0x0) ioctl$auto(0x3, 0x5, 0x10000000000402) 5.731442058s ago: executing program 0 (id=55): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x181a00, 0x0) read$auto(r0, 0x0, 0x39b8) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x2, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = clone3$auto(0x0, 0x7) capset$auto(&(0x7f0000000140)={0x0, r2}, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0xc0, 0xe}, 0x18) open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x40203, 0x0) 5.215625726s ago: executing program 3 (id=56): keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x80002, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x62202, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r2) mmap$auto(0x0, 0x400008, 0xdb, 0x10, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/sunplus/remove_id\x00', 0xa081, 0x0) write$auto(0x3, 0x0, 0x81) getsockopt$auto_SO_DEBUG(0xffffffffffffffff, 0x404, 0x1, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x7) r4 = socket(0x1e, 0x2, 0x8045) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="d12d16d18cb8af70acd3717d8500ae1d309fcf5482bd24b623b2e3c021119688d27e6df531247553944206b2057efc8ab2230cf748da86c077bd1ce950c9f9a5ce8387bc1e18b7c0fa0d45d7fbd788831647e454cfb7e320d3ca5bece7750aac637826f940809c16c5ee167ec6aec1f08e5b61fdd1ee41fcf84f7e2e9732cbbe3fcafb34da6db9831f5ec87a308b26394761af16d9d1099073c220833fe55268b982283bb3fdc4d59b9ee9175c0bfa230f809df1ce09", @ANYRESDEC=r1, @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) 5.094774307s ago: executing program 2 (id=57): mmap$auto(0x5, 0x8, 0x4000000000e3, 0x800000000000017, 0xffffffffffffffff, 0x5) socket(0x11, 0x5, 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYRES64=r1, @ANYBLOB="96bde04835b73e994631cc7d62a35a4409ebd15f9d151e429dbeb521cb2c5702b59ff89c09612f9485c18bd4d1ea0a79939fcad0b6d5a33fb272dd15f33977ff5aca622c0934012ed5f5a2e91b809865672233e012347593ea1f562cbc8934731c89d4afd93e21c9e4362ff077fbffa4e845b01f68429a3a337139473e08a16847a4f9873ca7775f18079ce57510ddeca96c81587b4aa42e8c38f8b73d570a259dd75a092f877c9e356b8f0a89b1e302d34385f02a410caa2b956db457d3991a2a7a1a44", @ANYRES16=0x0, @ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x159542, 0x0) 4.410600951s ago: executing program 3 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r0) r1 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x24f00, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={0x0, 0x14}}, 0x24008891) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(r1, 0xffffffffffffffff, 0x0) setresuid$auto(0x0, 0x7, 0x0) setfsuid$auto(0x0) socket(0x22, 0x1, 0x1000000) open(0x0, 0x46a80, 0x131) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ioctl$auto(0x3, 0x80108907, 0x38) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r3, &(0x7f0000000100)={&(0x7f0000000400)="260a1df70484c6b0818792f806ab44358c4d4f9f09dce033406c020059dd74a0b4653e078af4b554d2dab7ffa4bf82d2924e94b6fb7da4eb1ce1f75e82d41d3cbbb3b5db2bba37d03d47cd004a759fa1ecc4fa3d7968d2b05d178f10abc57cccaa406736244917e2e4226e2d1b3949a4dc697456f2ccffd1269af97c962765dfb1f817b2ff7c70860ffa08f9a75b64f55093bce277517184a419f961aaeacdd2", 0x9}, 0x8, 0xe637, 0x6) fcntl$auto_F_GETLEASE(r3, 0x401, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x696b}, 0xed7138c}, 0x2, 0x9) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) 4.239691239s ago: executing program 0 (id=59): mmap$auto(0x0, 0x8, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x1, 0x0) shmctl$auto_IPC_SET(0x10000, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x63102, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r2 = prctl$auto_PR_SET_MM_ENV_START(0xfffffffa, 0xa, 0xffffffffffffffff, 0x9a9, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2c, 0x3, 0x9) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x5393, r3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) fcntl$auto(0x0, 0x407, 0x100000) read$auto_mon_fops_text_t_mon_text(r2, &(0x7f0000000000)=""/113, 0x71) sendfile$auto(r1, r1, 0x0, 0x2) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x806121, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan1/skip_beacons\x00', 0x537083, 0x0) 2.824326497s ago: executing program 3 (id=60): r0 = prctl$auto(0x9, 0xc, 0x0, 0x3300000000000000, 0xf8f) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x0, 0x800, 0x5, 0xffffffffffffffff, 0xee00, 0x0, 0x8, 0x7, 0xc2d4, 0x4, 0x1, 0xffffffffffffffff, 0x8, 0x8, 0x7, 0x3}) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x8, 0xe1f}) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000140)={0xffffffff, @inferred=r0, @inferred=r0, 0x0, 0x3, '\x00', {0x6, 0x3, 0x0, r1, r2, 0xb, 0x22, 0x40, {0x1, 0x6}, {0x8}, {0x817, 0x800}, 0x7fffffff, 0x3, 0x0, 0x91, 0x1, 0x96, 0x5, 0x800, 0x5, 0x0, '\x00', 0x8001, 0x2, 0x6, 0x4}}) read$auto_lowpan_enable_fops_(r4, &(0x7f0000000200)=""/35, 0x23) sendmmsg$auto(r3, &(0x7f0000000540)={{&(0x7f0000000240)="a60369db7898ba6ad2b18e85c0968f2658b0402d446fc8035e8a92a89b5801cfb94bd2bfe380dcf36e027cdc2ae6baf1e10680d38fe7ef8fc689c2b16ca3f1499af61b26c39279f1a2321b51898c3cfe889b4639cdeeec62cd1bdbf523a750445488de7870dba57a4381157774797f2036a3b08d426739843a5d7ce7af03ce29b99e7ab899407607546723e8", 0x7fff, &(0x7f0000000400)={&(0x7f0000000300)="d9bd29f43c3eb390a4db4333337d102c6eb665ea369ca79eba081b56043cbb659d587f02b98e0fec7e96bcc3ccfaca0b4723101a571d822b4baad4265f3766acf5b6112ded383c810b295fd2d856409a022cd108ef97c2b9378520d45378087dbd0a47f082292a7a0e00a55c3f04c4d4e355f7e8e62baf36eca77ad23c325f53d345e273ec381b5249ee0a143f42a9dd5b313d0fe5a060ef09b8234680ca517d3d1db1b84d2a56722a1b6ed438a642ede795fa234e60768f602bea479d2dcbfd573342e850b3cfef752e4cc842a3f9d50ae5db3dd3931b7ea8a4da96818090", 0x701f}, 0x9, &(0x7f0000000440)="c63310c7f63a1e643aa3a06248b69f99bf4e8d1e90584f1706a474a3b561563be22b31e45010c46d87724522545a92856ddb94324b6e5ec6e35a6239a21629bbcaffc88e942fd38c42672d126fe0b024fff866cd32c3466a0e016102a1fe2eeaaaf7a1983231d8f7902e36daccc8737fe7d0c3f520b6b85ea56d7411ee8948891ff3ca4d317cdc68b6eceab635c8753d03ef16747439abd02153f699e3a0d79d1235760388e7461d447f2281115deb5a2435e0a2e7aac3a9dcb6583bcc5b6dc827475bc0be65cd40d544165bfb38e05b2adda9a4ee95cc0434c01b062f54", 0x8001, 0x7}, 0x2}, 0x1, 0x6) madvise$auto_MADV_DODUMP(0x8, 0x2, 0x11) sendmmsg$auto(r0, &(0x7f00000007c0)={{&(0x7f0000000580)="5e98c6b6c3d651b9ec8a082bec3a5863dc622c393f2f51aba9d8a442a2fd3efc9b2329ce8efeff2c05e815d8b699aa32d203601355d7b360e5d240627b99dc53a36c23048303eb1016828f1090e7b0ea9849657600ba3556ab58cdee4bd701377addc984b5cb8c6e6f8b873509790dff4683ab568629df565260fc5f758f67f2c503eebd4b494fea0beb553483a77901c33f484a13268ecc572efc6dfecbbf43d83d4907eb8831761f839e4fa98154eab32cf42762b2aad6418563143c781020d47546e452a2b0408ef8bbe345bcb73a3da4300d33a08cd5c07c3a216896d86b86826a99cb4a9ed0098963944d20e21e", 0x0, &(0x7f0000000700)={&(0x7f0000000680)="0d465ef6d570a87077a7e23f8ac0d834e8edb1ab742c344797a186ad4cbdfaa01962196857d681f691a760846c8117a15e79c81a71efc581a094f834b3693bd3c02166be7d912f2bb3631e12f69792c8fb849fbe", 0x7fffffffffffffff}, 0x1, &(0x7f0000000740)="50263072d99d4f845897f2959012846eb2fc4191003958725c09fa6805db51dcf7fecd575dd39f85b45e3f88d2973e1d36bb5f9918a591ae8f02b74be07823774d538347f3872a25c338af1846e9d536662f5d709fc9ed2d8335eba01eb9096eb0b2d4297549c7699bfcb71c82686334e7f3d7262a", 0x5, 0x5}, 0x2}, 0x4, 0x2) r6 = clone$auto(0x5, 0x9, &(0x7f0000000800)=0xfffffff6, &(0x7f0000000840)=0x401, 0x9480) r7 = fcntl$auto_F_GETOWN(r4, 0x9, 0x5) rt_tgsigqueueinfo$auto(r6, r7, 0x81, &(0x7f0000000940)={@siginfo_0_0={0x8, 0x10, 0x2, @_sigfault={&(0x7f0000000880)="a9d8dee94f7bbb08b356d19d23d72142ac3eb3206c3e8591b5d02e31dd5429087cdd5e1e78db827ef721630a1d3329947e7c126acb3d79b2b091d622e63bbc5d13f59f3ed0fdd47c9c2b98f86831e039f2d0b4670290a6a3e5c7b4173c327d105e9936f8766b49fdd19386ba37f18fa6075de46af7dd1f738b3a38694d9d952d04557b3572d644cbf607eab62c8d2995f6e5bb4d3674904b14f183e0fcd9bac3314669668e1dc75b98b1b559816e2a79ff7a68", @_perf={0x5, 0x5, 0x10000}}}}) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000a00), r0) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000001bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000a40)={0x1118, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x10c9, 0x13, 0x0, 0x1, [@generic="cfdd0f1243df6f8bcb47f2b12677f0f8134d225b0f163d26fecc6e4b5a6c2149e71678e468a1a21324c8dcb62c73f45bee0a113c17b928518b53bf732304a56d2004bd4d8caee6d3e9ecc1ce211235fd5839889a35262e668e04529d6875d0de02333bf2029fb04d45962d4409c2f7be4baa052d01b01c03211c5b9db39d055f00f84166e0cc37d0bd074662780b7dcfc87cd20b472a46e77b6eca48a1d5f170f0927d6a2193c43d1920d6f944aa547a55", @generic="f17f91e0810c20cc575e4ffd95d2a4e677cc82c15bd33da10ca570a3ef56e6aa9895ffc06ec668bd91233e41c123d839021a60c6285131b2cdf82439b95f1ee6e9b5392664319a6b95f68eb6c5003d33f983d43af209ec22e34e195159a915b5f413102ad701f8fa4bde588e4c453210a9189c53857c9ae73f2fb13224a85176cf6558d4b4f0df15551bb2f3a414b185f94a812fc1f0686234a233f7a773cb629bafe355591491cf254edae44faabf3b430e0417b60abf5a50bf466e01d9557d9e4053d1ba841cbef9daf0299ba0d30daade0f3b7bfc9fd995d400107d3422d6e45cdfa29bfa81f91309e29fb50438301f3dca84b7794247e5cc6ee9d92272b75cf2482b3faac679df0b5e6bb688f54b548ab58956ed551d9eebe40a3587624aedd5b1ecb839f3b12c46dedaf08ceb14aeed103432450b33b4990df46e4e4c6e30e8d6aefd9de17cc6be7b0435921ae217301ea0b482f9f50346abe837342bb73273ec214e6f5259e46ef78562cddb7a5744e20da46710e64dec81c25d17979b9c46cba3bdceae95545c66a9edd5aa13d8ce9f871676916b93d95d93a32ec84fb49ac205ee6b932235035402d5b7850f410b3bae9d4cc6b8461646ed317106ce51803402e325561ac772092e8479bdbe1e4153789a973b4932ed35df34acddebc6d2309a8f3b6fc3de3a4121153b81af85cb2fc88e5dc9a20b48073ad93d9e6e564da359890a16abbcb5ab701d141475570d3f8ec26deed03cd7c9aa15bbb6f7fc718dd6a6b18b09bba44be50377ed421725a56ef4ff9b6bbcaa15a757c398333ff4d48ca3fd8dac09a60afd86ecb96e02f425efced49725271a39d17c70890c61a810a0add44e5054534441badc1aa284b53448f58c115efe5411e6dc49787310560450d40c25a20a8b2e42e535509ab6fd0cf4f4ee817b8d789520090bbb94c812f403b9b0e2266122902394e162c1d389d5b50edb8e76714e55aeacea6c7a22523512b0954712969fa493336481afe7edd4b97e7d0c954a79a42dd7d6f08c237615086979ac9165e4e0daf3e531d7354801f18bf79ea4661132e994e19d1d5e682189dd202ceef0e62c57e49978e27c5a645a644964676b0323ad497292b2b5aadffa12de2ce7ab2c01654be9c960d60cad09d2458b20debcb4c819264dd29ff6c7416975f8ae759e49cbab90f3b7700a798c05e6447278778fe320f9a315604b1f6599954d77318686ef5a72bcde961632668e02f2ec3b385d7ac81c27087735a2ed82e83d3ea5dc2f0273c85e2761208b3795df40da3c17809d9132a480838dac0991d66b483a097ccbb323edd3c4e7b2a985b2a6e56d0d0ac857bf989435c0aa2324603472e568d4b87c8765c4bf055fd97ac07c94fe186102aacb001ef5b39191882d1360f2b022910281e9c95bc3fe2b7ffae5406bc2788408bc35e671f74df05d1f1ad3a8ba1407a01af0df289917bed5a4d8730537d45ec8ea68ca62b05d477fba632cd97432a8270731b1f3082379914e275ed4e00b361128d48f3206a63c454209695b20deca049bd5d29ecfbe569e321704f67dd923094afe4a05146303961b92012824e8acf8346ffa23a0d9e2d287668a4ffb319bab1169b95024ecd818190cae91861d61f1b65f3e2e1da396ed1e54fae8bb8486c50bfc9e1b36ac2f34238b4a80461507894aa0a775a97c7bdd28fb926373dbf93b3d2f4e7bd4875f7dd403fa39b14fc5a472611c4a6a099faf35bf32c7f64fb101f4fb751bc35634e6a06386202d5b4637fa65b71c01a7857f0aa8a1d887d12b9cbd16b2db4fc6b8dc61204762fbe50c656a7e096f47ac5ccbeb958b22fd69c0f20d9513315eacc7541db66f12aaca07c349994fb8366adbc58b50ada57da1097e1794552809108cf33edf8c43b5bbff1b430009d734f83234e3e66f7b8d0973aca2b8343bbf599c76cb2108ea23d4bebc812c7ba5696ec74cfb82fd044cd1321f8ae624a5029becc1fe6f11b650607c8574713fc5fd2dbf1ea439ea6b464f37873f89fe34f65e0c0be5ccca9932862f16b9c36ca895c3b115799604c1102a35012d6001f2950e16102ba02d19e963356bf81bc665ae3b166270c13e33962b17e2cc7bd951ec588b88ed73650ff6f8c279601b5d95a7fbeb13267b9f9ea1caed78dc7be944c80b385ceb52e3ab5552844f8a90da9a8df84c6b82478d546dc33dccfdffb4c9196ad0bdff5e7af4f7b5e54857d1541891372788d0b1b58773ac74d2c3688f0249c8f309d9ec425ec80ea48b68e1f01827359086d87e4a4fbc3ac3bc51297201252555514eb68f2a8f95aa8d9c81e1cd537e2f404f3e273fbe819da8244c8f2b02b1ed81b0285b7236f4f83a503bda2dc87c2c3ae85d44f2c28771a55904a4466c3a7202280e950b491054d35c1228cef34cfd3f23eac34772558f7a1404c8800b9859cda87abf28aabc226a702884a2cb77e19e77b5ef284a850f46d4b16cea5286542f6f1f52c551f81dce410ba9f6f58245a9dce75b20937cbecd75fe379342d62f0f9f70fce5b4a854381983f092c144e961587eb556864e8ec17fd90caf21ed76206e7d803fa33268af2d1a491ed2b91a067c32257143a8b7da43ccec186fc51ec8eb57d2e2e2bae46f387a8590a9cf48feb17bc5c92ff4aa62a11abc3fdedf11f1a71fe14634c99f2e3a5a99b9ae81f041e7dad98c935087b722b0b33f7a1bd24cf6bf51d10ac644e6427404c696de7779d15eced813407310cea564e43d556f6b1975a1faadc2a2b5a563dcd93e9e6e56e997892214bcbcf78c904de7278fc3c8602bd4e71c301211a68fa932efd2e55550a57e0bfadcdcad5094ce873db738df0d886c4088c70a84b813766a1711a5f868598a9815887f5c58403f9f54028e2b76a6808ea7c3937791e2a6cd56f4eca8a6a4320c10eaa982991a7586a1d755150185979fbabcb986dd453ebaea3750e7e2adb0176bbb14342a076b36765e410779e2421c69052117f5a16294135ad945438af573add033c0ea22be4d9ce22b335095271a1cb44334f37cb44a382b4a943934744f0971959d2dee23b3247f3ef0a062ced0417998de8977c94477a2a4a3fdab46c57e7e99084fd2774d8e8ae7516513bc96e7b8ccdbf1bebe8b19cedb47ea64c55d34707ef3df186501fe94efbd0d78c218b8be4a59796d5ea16656d01307886a9369b9d9375e36bbabe3dd54957dac17b500f2162ce92bc196036af1213c527a2fc7fa6c64885d59e2a48a14cd06fd64d3a96a5cdb6e800e33ec5141b11539eef3e4373da87b5963b166b0c2942365cdddc833541aaa1dbd40fd8276cccbf0ade224c9038d384a2f90413e67bf063472020f888a5640d4fe61b9bc071deed502d59927d397152d34a56a436a78b63f70aa1b01084c44dbb57f92854483b206ecae68aa76c30dff2bd638ae4cb812b97418817221c3b7770df66c3e85bb22c6d31178f953dcab768f380a956a8ffad08e297f63edd283d462211cd68899cd2addec8b911a6ef6aefe9c6a2bbf8267cbaaf926d39fb84e78d11383efd5d697e60455693f766c092cadd9bc38a2c7d2595a745aada01cab62fc528a5b5626f44c852bf67303e5d24d0fffeb72d60b97dd4c28f169af12c86537988013e0fd648f2079906661e86cbc6835c3b01aa2dcea200a23f648e438248c52844b06123aa171c7b9a4e0a5af78a5faf836628454373135a92f4dbca1aeb447a2e636cf1890cd888b8ee4e2967f73526347e77dc46f63aa992c9f647abbfa8b9956ec111de84c8094c584a167b9615657e79a46084aa5a66a223154084cba150e88952e66c3d1dfd496a74bca23ae8354ae45ff9d64e23d179a10497d0e0aa393e3dbae1af0433bf9b324d8f44222ff03480ad92ef445f9a1cfc60deaabf936c8b5c0f9b7dc1ab46bbb71cca7712bf593c1df753866b646cf011d00e4d371257b60dca072191ed8f3f3b6f0ee22b08bdd71acbc3ab0e26ce4c24ff5a490d929cec7bac0705c3b80986f5d8e2a2d67352c70d0ed7526a8d838dabfda56ca5dce8b93c3222a477d89c4fd2ea71af4d06f2fd9e184bf515772bad0d1cad0710fa865e9579fd6cf66f8301593d61afb9158d2b6b33dcd7d6376f3e76a5362a5b360a4a5f9fcb7b26248e1d6d51bbedd6d613b5cea0f76eac614b4e8e02ebe24fa5fd9cdb36536b62cca6f6eb06a9e38ddfc5475479b63d8c5e0675eece720c88467405bcb34d4a03a7c64ea312577b2b375e6fd5c91ee8b9a5f3d02ff68b4a9c2b48548cbbcdf1aa2ada41792d40d158231e5146ed2b32cf49c268d7e2844b4689833187c023b0c782f3f23dec976740b7bbbe6f0d77000439e3be1c539c45143cc61650a7ae7179d6efefe3046a4a22d43548e4a228c1b5661543828ab07fc41ea25024768d47a7c1118ae47c90704a31a062e5a967b85bcd8376419d90916465acb86ffd5d0447d4de5bdb5a418e071fb1b3bf5ef7d22f75762df285c3b5193126bb3b418cceef7f4dc54cfd60fcada7610bf48d6e7d8bd863e2aba0d404a30f1ac426e24b1e8b180b9958e8fa7631ff3953c51079d68ebd5fabd2b5118538080e28b45602c3161506f4c408267931be8af27d990a3384ad3a8044eabe1723e4dcbd20e797a3a0c2f25c1a366221600199b1f8ed40785c00ccfd66c9b20c82a91b97b43d495840bc832cdd8484bf238bc4679171a671e498fc9506c5cd781179e5e96940bc7b43c3d5160baba7be75047146c3f396e2c113f3dc40c1af29dd9f6f9148702fea7cfc21dc505cf1d32f1d4ac057780cf8ac14c1335ae2b9d78291f7be3cecdaf9a5db0cbee5408fcb9a224cc78423986b2b0621035b35a35f1093fc2d6fb654bb8a390c7bf6e5389a387c0833ca12a3f75c72fce9c2f26a16d996609d3e1721d646281836dd1d50110ba60ca8ec62e76085a6c508b5f5e00b70c85ddeddb27d704601beb8e93454daaac523796c813dd90a75437d99fa3281af3c08da824904206802baa7e1f0d894ed379a9b6e28563404ec01805f0618b1d75dae74f85c48a3350307b7f400bd4fec47e070017a6ad5a6473271fb4f811d05a781812aeecbaa19aae79fb75e30e8af6fe9cba2782966213793f51c86e633e9cd68fe0291e5310dab657cf98192f74cebf0a67e63a2ef243f64f9bed498385cb25ed2907b38c47b9016ff1ff259fa8f3e4066bba3fcef33899919127195a3f86048ad7f22a512421ae60417c57fd62355dcd0df88880a21af7c8ef6b754fca8dacc2caa575a4bc87dfde1566362a45879f95646a5df7da3d9ae59d46daec486b85e6ca639672f456402a062f783f72b228c0d2dd594ace5bc2fb13eacf96e1bd1705ebaf9502d58484a907b0af6e02900480d57e0b68ff8cbf55658b5f57b93f7fbc18db936d15c00855a69597c5aa100b163857232c76084aeea6d1595e547ea60a4d6043d70fabd4c068a11b8c2db809a0f1a25225047543b2c8a756554cd8c2d1ab34a1bda391393ae2b7ea84635737f51db430a4141da98dc36bb9e25a06883a4d3b7cbe3abb76c428e4393cbc42119f05436fd2d6d78351db4ed6a6b747527a9a7781f30a308af94b4ba300ab879a70c910605663635e736c5c6ef5d6592f72540ff62f506437bccdbf88a8419e39b13a4b740066089a158c4003ae5364038263311af7558a09883aa543948e6c37fe2903ea4923566775dd60656a48b175febc382912ee5e23816a6673721da14054a615ee0bc9045221d92d511c07699ad861489c70cb80102c273a8c6f1119", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x80000001}, @typed={0x8, 0xb0, 0x0, 0x0, @ipv4=@multicast1}]}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '['}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xef05}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x12b7}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xb}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1000}]}, 0x1118}, 0x1, 0x0, 0x0, 0x8041}, 0x40) timerfd_gettime$auto(r0, &(0x7f0000001c00)={{0x5, 0x87c}, {0x9, 0xfffffffffffffffa}}) r9 = socket(0x1d, 0x800, 0x9) setpriority$auto(0x0, r5, 0x887a) readv$auto(r9, &(0x7f0000002c40)={&(0x7f0000001c40)="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", 0xc01}, 0x3) r10 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000002cc0), r9) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x30, r10, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xf0}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x747d}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000004) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002e00), r3) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000002f80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e40)={0xd0, r11, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY={0xba, 0x128, "ad0d382bc01c59b699eaa2e28a055785a2d2c26ed13f541e6f996513fcbd02905cc213462fccb11f4b33a0e5cfe55fadcd512de126dcc8abb59153cc61e5045c3d2b6679e993afaa377e13244377ece3bfb0bbbebc10ec0224bde6a0fc1f6dc18ac9b40edb4597e0e423e9f43f7267386556f6611969ec0694a1bff0b2bc7d79a278501d87eaf8da27d30935ad55fa65a4235a696418764474b9c0f29156373992a7d94ac0a5225c6186ec8684aebadadfb26ba2c7d0"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040020}, 0x40000) madvise$auto_MADV_DODUMP(0x9, 0x4, 0x11) ioctl$auto_XFS_IOC_FREESP(r4, 0x4030580b, &(0x7f0000002fc0)={0x489e, 0x1, 0x5d, 0x7ff, 0x8, r6}) timerfd_gettime$auto(r3, &(0x7f0000003000)={{0x3, 0x3}, {0x1ff, 0x1992}}) r12 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000003040), 0x6de800, 0x0) r13 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000003080), 0xa0200, 0x0) ioctl$auto_PPPIOCSPASS(r12, 0x40107447, &(0x7f0000003100)={0xf2d0, &(0x7f00000030c0)={0x5, 0x1, 0x1e, @inferred=r13}}) syz_clone(0x8800, &(0x7f0000003140)="a6fe213a70bce8d97465c250b2f8e497bd84c30822c417dcb94b53a8d2f572dbc01fa9b46a2bfed7e54724c1950b285df6f22dced646336cb3c90f1e108b521f62ecb9bb06843dcfac559b8ec02441f563bcfa7093143acab2458a5c246bc57013cf4c76df34e1ed06a9bb16b303bfdd16a2e9290f36f7e5df9d4703a59dd95234407fc70020f8c218fd03a996ebe7b089da030c5d27996f9b", 0x99, &(0x7f0000003200), &(0x7f0000003240), &(0x7f0000003280)="6fd0b1250ec66250934b0749f8fc72ae3a208053cb3fd86271de9300f6e77862bc393dd93a12a4cf3bcdaa52fc831695bb030bb90a7356997c7102a8faf98d0a82ad182a225a6df2836d5489") read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000003300)=""/4, 0x4) ioctl$auto(0xffffffffffffffff, 0x8, r4) 2.158167473s ago: executing program 3 (id=61): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100fe) io_submit$auto(0x0, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) r0 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x8, 0x1, 0xfffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, 0x0) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r3) madvise$auto(0x0, 0x2003f0, 0x15) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_VLAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="11feeb91", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008050) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) accept$auto(r0, 0x0, 0x0) 1.323989423s ago: executing program 2 (id=62): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, r1, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f0000000280)={0xf38, 0x6, 0x3, [0x67, 0x6, 0x101]}) read$auto(r0, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) r3 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80208000008, 0x2, r3, 0x20000000000803}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 1.017021748s ago: executing program 0 (id=63): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000440)={0x80}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x0, 0x30, 0x0, 0x568) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14007800", @ANYRES16=r7, @ANYBLOB="01032dbd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) 992.94034ms ago: executing program 3 (id=64): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd7/queue/dax\x00', 0x0, 0x0) mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x9) socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMAXCID(r2, 0x40047451, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x212001, 0x0) select$auto(0x3, 0x0, 0x0, &(0x7f0000000200)={[0x1, 0x9, 0x5, 0x5, 0x800000000004, 0x0, 0x5, 0x19, 0x10, 0xfffffffffffff7fe, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0x739b, 0x4]}, &(0x7f0000000040)={0x0, 0x7}) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003180)=""/4112, 0x1010) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r3) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) 803.224773ms ago: executing program 2 (id=65): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000000)=0x12) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/stv0680/new_id\x00', 0xa0000, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x3, 0xf, 0xdf, 0x9972, 0x7, 0x28000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r2 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) write$auto(0x3, 0x0, 0xfffffdef) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, r3, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(r2, 0xfffffffffffff000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x400, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r4, 0x4008af00, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) pwrite64$auto(r1, &(0x7f0000000100)='B\x00\x00\x00\x00\x00\x00\x001\x00', 0xe, 0x7) 0s ago: executing program 0 (id=66): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0xffffffffffffff66) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0x80d, 0xc000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x1000000f, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6f, 0x2, 0x1, 0x8, 0x100002000}}) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) personality$auto(0xfffff032) fcntl$auto_F_GETPIPE_SZ(r3, 0x408, 0x9) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) read$auto(0x3, 0x0, 0x1f40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 83.845222][ T5815] cgroup: Unknown subsys name 'net' [ 84.014967][ T5815] cgroup: Unknown subsys name 'cpuset' [ 84.024225][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.791235][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.794224][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.796243][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.810379][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.818582][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.826683][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.834596][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.843388][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.851477][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.852130][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.866315][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.874204][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.875846][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.889237][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.889403][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.897836][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.910581][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.913557][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.922003][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.926967][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.942404][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.410468][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.580248][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.681886][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.755675][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.778259][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.785951][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.793487][ T5831] bridge_slave_0: entered allmulticast mode [ 88.800696][ T5831] bridge_slave_0: entered promiscuous mode [ 88.834978][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.842497][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.849686][ T5831] bridge_slave_1: entered allmulticast mode [ 88.857170][ T5831] bridge_slave_1: entered promiscuous mode [ 88.924721][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.931996][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.939124][ T5828] bridge_slave_0: entered allmulticast mode [ 88.947464][ T5828] bridge_slave_0: entered promiscuous mode [ 88.992030][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.999195][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.006580][ T5828] bridge_slave_1: entered allmulticast mode [ 89.013920][ T5828] bridge_slave_1: entered promiscuous mode [ 89.034855][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.059959][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.067216][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.074732][ T5827] bridge_slave_0: entered allmulticast mode [ 89.082086][ T5827] bridge_slave_0: entered promiscuous mode [ 89.092906][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.130802][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.138291][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.145889][ T5827] bridge_slave_1: entered allmulticast mode [ 89.153089][ T5827] bridge_slave_1: entered promiscuous mode [ 89.183200][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.204726][ T5831] team0: Port device team_slave_0 added [ 89.223313][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.245304][ T5831] team0: Port device team_slave_1 added [ 89.251125][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.258416][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.266012][ T5829] bridge_slave_0: entered allmulticast mode [ 89.273306][ T5829] bridge_slave_0: entered promiscuous mode [ 89.293600][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.315581][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.323152][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.330587][ T5829] bridge_slave_1: entered allmulticast mode [ 89.338203][ T5829] bridge_slave_1: entered promiscuous mode [ 89.359311][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.393851][ T5828] team0: Port device team_slave_0 added [ 89.410737][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.417915][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.444039][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.468767][ T5828] team0: Port device team_slave_1 added [ 89.487195][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.494290][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.520405][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.543062][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.578964][ T5827] team0: Port device team_slave_0 added [ 89.588853][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.599076][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.606416][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.632371][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.645411][ T5827] team0: Port device team_slave_1 added [ 89.662563][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.669525][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.695589][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.767078][ T5829] team0: Port device team_slave_0 added [ 89.774627][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.781678][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.807827][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.825491][ T5831] hsr_slave_0: entered promiscuous mode [ 89.832224][ T5831] hsr_slave_1: entered promiscuous mode [ 89.842313][ T5829] team0: Port device team_slave_1 added [ 89.848647][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.855753][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.882320][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.962507][ T5834] Bluetooth: hci0: command tx timeout [ 89.962512][ T5840] Bluetooth: hci3: command tx timeout [ 89.962722][ T5845] Bluetooth: hci2: command tx timeout [ 89.971393][ T5834] Bluetooth: hci1: command tx timeout [ 89.988935][ T5828] hsr_slave_0: entered promiscuous mode [ 89.995473][ T5828] hsr_slave_1: entered promiscuous mode [ 90.002051][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.007871][ T5828] Cannot create hsr debugfs directory [ 90.016117][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.023294][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.049609][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.090325][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.097418][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.124050][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.191904][ T5827] hsr_slave_0: entered promiscuous mode [ 90.198372][ T5827] hsr_slave_1: entered promiscuous mode [ 90.205222][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.210976][ T5827] Cannot create hsr debugfs directory [ 90.340836][ T5829] hsr_slave_0: entered promiscuous mode [ 90.347799][ T5829] hsr_slave_1: entered promiscuous mode [ 90.354217][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 90.359966][ T5829] Cannot create hsr debugfs directory [ 90.673779][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.696353][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.724999][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.742206][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.803045][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.817411][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.834989][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.855445][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.924909][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.954610][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.970491][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.985834][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.089339][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.105079][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.116284][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.131143][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.237641][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.282272][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.304365][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.320805][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.328096][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.366111][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.373252][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.412652][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.423431][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.454097][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.461383][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.495963][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.503115][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.518457][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.556899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.564079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.596902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.604070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.620183][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.694237][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.741184][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.748464][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.788920][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.796188][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.016731][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.042287][ T5834] Bluetooth: hci2: command tx timeout [ 92.042777][ T5837] Bluetooth: hci0: command tx timeout [ 92.054191][ T5840] Bluetooth: hci1: command tx timeout [ 92.059704][ T5845] Bluetooth: hci3: command tx timeout [ 92.292751][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.309914][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.486569][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.545110][ T5831] veth0_vlan: entered promiscuous mode [ 92.587613][ T5828] veth0_vlan: entered promiscuous mode [ 92.601283][ T5831] veth1_vlan: entered promiscuous mode [ 92.637110][ T5828] veth1_vlan: entered promiscuous mode [ 92.719399][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.759013][ T5827] veth0_vlan: entered promiscuous mode [ 92.790954][ T5827] veth1_vlan: entered promiscuous mode [ 92.799609][ T5831] veth0_macvtap: entered promiscuous mode [ 92.827307][ T5831] veth1_macvtap: entered promiscuous mode [ 92.847674][ T5828] veth0_macvtap: entered promiscuous mode [ 92.873200][ T5828] veth1_macvtap: entered promiscuous mode [ 92.895558][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.920742][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.944577][ T5829] veth0_vlan: entered promiscuous mode [ 92.965327][ T1976] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.975770][ T1976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.993037][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.000401][ T1976] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010203][ T1976] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.020400][ T5827] veth0_macvtap: entered promiscuous mode [ 93.035904][ T5829] veth1_vlan: entered promiscuous mode [ 93.058706][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.072792][ T5827] veth1_macvtap: entered promiscuous mode [ 93.103642][ T2209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.128777][ T2209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.143136][ T2209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159315][ T2209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.196649][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.249266][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.260084][ T2209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.275105][ T2209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.287972][ T5829] veth0_macvtap: entered promiscuous mode [ 93.314328][ T1976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.324463][ T1976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344338][ T1976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359527][ T1976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.369714][ T5829] veth1_macvtap: entered promiscuous mode [ 93.392738][ T1976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.400628][ T1976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.468569][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.480679][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.486364][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.505501][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.537963][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.580835][ T1976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.596868][ T1976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.618231][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.627908][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.639699][ T1976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.656164][ T4259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.784145][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.800642][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.955069][ T2209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.980818][ T2209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.063018][ T1976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.081458][ T1976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.092045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.123700][ T5840] Bluetooth: hci1: command tx timeout [ 94.123863][ T5834] Bluetooth: hci2: command tx timeout [ 94.129211][ T5845] Bluetooth: hci3: command tx timeout [ 94.139983][ T5837] Bluetooth: hci0: command tx timeout [ 94.168230][ T5922] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.302194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.357658][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.460528][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.511546][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.302302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.723708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.819577][ T5947] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6'. [ 95.881733][ T5947] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 96.122062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.171977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.203076][ T5845] Bluetooth: hci0: command tx timeout [ 96.203128][ T5834] Bluetooth: hci3: command tx timeout [ 96.209844][ T5840] Bluetooth: hci1: command tx timeout [ 96.210320][ T5837] Bluetooth: hci2: command tx timeout [ 96.332532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.337642][ T5960] nfs: Bad value for 'source' [ 96.468382][ T5959] FAULT_INJECTION: forcing a failure. [ 96.468382][ T5959] name failslab, interval 1, probability 0, space 0, times 1 [ 96.491347][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 96.491387][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.491401][ T5959] Call Trace: [ 96.491408][ T5959] [ 96.491417][ T5959] dump_stack_lvl+0x16c/0x1f0 [ 96.491477][ T5959] should_fail_ex+0x512/0x640 [ 96.491507][ T5959] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 96.491546][ T5959] should_failslab+0xc2/0x120 [ 96.491586][ T5959] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 96.491617][ T5959] ? __d_lookup+0x25c/0x4a0 [ 96.491647][ T5959] ? __d_alloc+0x35/0xa80 [ 96.491690][ T5959] ? __d_alloc+0x35/0xa80 [ 96.491712][ T5959] __d_alloc+0x35/0xa80 [ 96.491743][ T5959] d_alloc+0x4a/0x1e0 [ 96.491773][ T5959] lookup_one_qstr_excl+0x175/0x250 [ 96.491813][ T5959] start_dirop+0x59/0xb0 [ 96.491855][ T5959] simple_start_creating+0xf4/0x100 [ 96.491898][ T5959] ? __pfx_simple_start_creating+0x10/0x10 [ 96.491945][ T5959] ? do_raw_spin_unlock+0x172/0x230 [ 96.491984][ T5959] ? simple_pin_fs+0xa3/0x190 [ 96.492025][ T5959] debugfs_start_creating.part.0+0x86/0x1c0 [ 96.492078][ T5959] __debugfs_create_file+0xb3/0x530 [ 96.492134][ T5959] debugfs_create_file_full+0x41/0x60 [ 96.492168][ T5959] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 96.492206][ T5959] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 96.492279][ T5959] ? lockdep_init_map_type+0x5c/0x270 [ 96.492316][ T5959] preinit_net.part.0+0x437/0x8f0 [ 96.492358][ T5959] copy_net_ns+0x4cd/0x7c0 [ 96.492404][ T5959] create_new_namespaces+0x3ea/0xab0 [ 96.492454][ T5959] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 96.492497][ T5959] ksys_unshare+0x45b/0xa40 [ 96.492545][ T5959] ? __pfx_ksys_unshare+0x10/0x10 [ 96.492596][ T5959] ? syscall_user_dispatch+0x78/0x140 [ 96.492644][ T5959] __x64_sys_unshare+0x31/0x40 [ 96.492678][ T5959] do_syscall_64+0xcd/0xf80 [ 96.492726][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.492756][ T5959] RIP: 0033:0x7fb4a358f7c9 [ 96.492781][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.492810][ T5959] RSP: 002b:00007fb4a43d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 96.492839][ T5959] RAX: ffffffffffffffda RBX: 00007fb4a37e5fa0 RCX: 00007fb4a358f7c9 [ 96.492858][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 96.492876][ T5959] RBP: 00007fb4a3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.492892][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.492908][ T5959] R13: 00007fb4a37e6038 R14: 00007fb4a37e5fa0 R15: 00007ffd163e0848 [ 96.492960][ T5959] [ 96.821525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.337184][ T5971] capability: warning: `syz.2.10' uses 32-bit capabilities (legacy support in use) [ 97.360663][ T115] cfg80211: failed to load regulatory.db [ 97.416561][ T5972] Line length is too long: Should be less than 4094 [ 97.927342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.075402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 100.267243][ T6006] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.349394][ T30] audit: type=1804 audit(1766291810.128:2): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.17" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 100.542751][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 102.262710][ T6009] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.485326][ T6031] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.566326][ T6009] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 102.805872][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 105.121035][ T6054] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 106.308411][ T6069] Zero length message leads to an empty skb [ 106.348120][ T6069] netlink: 54 bytes leftover after parsing attributes in process `syz.0.29'. [ 106.638437][ T6075] FAULT_INJECTION: forcing a failure. [ 106.638437][ T6075] name failslab, interval 1, probability 0, space 0, times 0 [ 106.717447][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(full) [ 106.717487][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.717504][ T6075] Call Trace: [ 106.717515][ T6075] [ 106.717524][ T6075] dump_stack_lvl+0x16c/0x1f0 [ 106.717571][ T6075] should_fail_ex+0x512/0x640 [ 106.717599][ T6075] ? kmem_cache_alloc_noprof+0x62/0x770 [ 106.717645][ T6075] should_failslab+0xc2/0x120 [ 106.717685][ T6075] kmem_cache_alloc_noprof+0x83/0x770 [ 106.717719][ T6075] ? ptlock_alloc+0x1f/0x70 [ 106.717753][ T6075] ? ptlock_alloc+0x1f/0x70 [ 106.717780][ T6075] ptlock_alloc+0x1f/0x70 [ 106.717810][ T6075] pte_alloc_one+0x84/0x3d0 [ 106.717850][ T6075] remap_pfn_range_track+0xd26/0x15f0 [ 106.717908][ T6075] ? __pfx_remap_pfn_range_track+0x10/0x10 [ 106.717955][ T6075] ? __pfx___vma_enter_locked+0x10/0x10 [ 106.718001][ T6075] remap_pfn_range+0x1e3/0x380 [ 106.718036][ T6075] usbdev_mmap+0x753/0xa70 [ 106.718105][ T6075] ? __pfx_usbdev_mmap+0x10/0x10 [ 106.718151][ T6075] ? vm_area_alloc+0x1f/0x160 [ 106.718217][ T6075] ? lockdep_init_map_type+0x5c/0x270 [ 106.718268][ T6075] __mmap_region+0x13f2/0x2a00 [ 106.718326][ T6075] ? __pfx___mmap_region+0x10/0x10 [ 106.718388][ T6075] ? kvm_sched_clock_read+0x11/0x20 [ 106.718452][ T6075] ? sched_clock+0x38/0x60 [ 106.718539][ T6075] ? rcu_is_watching+0x12/0xc0 [ 106.718671][ T6075] ? __lock_acquire+0x436/0x2890 [ 106.718724][ T6075] mmap_region+0x32b/0x3f0 [ 106.718768][ T6075] do_mmap+0xa3e/0x1210 [ 106.718844][ T6075] ? __pfx_do_mmap+0x10/0x10 [ 106.718900][ T6075] ? __pfx_down_write_killable+0x10/0x10 [ 106.718959][ T6075] vm_mmap_pgoff+0x29e/0x470 [ 106.719007][ T6075] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 106.719062][ T6075] ? __fget_files+0x20e/0x3c0 [ 106.719118][ T6075] ksys_mmap_pgoff+0x32c/0x5c0 [ 106.719167][ T6075] __x64_sys_mmap+0x125/0x190 [ 106.719201][ T6075] do_syscall_64+0xcd/0xf80 [ 106.719246][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.719275][ T6075] RIP: 0033:0x7fc8d5f8f7c9 [ 106.719301][ T6075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.719335][ T6075] RSP: 002b:00007fc8d41d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 106.719375][ T6075] RAX: ffffffffffffffda RBX: 00007fc8d61e6090 RCX: 00007fc8d5f8f7c9 [ 106.719402][ T6075] RDX: 000000000000000b RSI: 0000000000280009 RDI: 00000000ffff8000 [ 106.719425][ T6075] RBP: 00007fc8d6013f91 R08: 0000000000000006 R09: 0000000000000000 [ 106.719450][ T6075] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000000 [ 106.719474][ T6075] R13: 00007fc8d61e6128 R14: 00007fc8d61e6090 R15: 00007ffe36bbb9a8 [ 106.719515][ T6075] [ 107.631722][ T6091] netlink: 54 bytes leftover after parsing attributes in process `syz.0.34'. [ 107.952960][ T6095] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 108.356615][ T6100] process 'syz.0.37' launched ':,' with NULL argv: empty string added [ 108.788304][ T6105] netlink: 54 bytes leftover after parsing attributes in process `syz.3.39'. [ 109.445178][ T6117] bridge_slave_1: left allmulticast mode [ 109.455637][ T6117] bridge_slave_1: left promiscuous mode [ 109.472254][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.516764][ T6118] netlink: 64 bytes leftover after parsing attributes in process `syz.3.43'. [ 109.671393][ T6102] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 109.882945][ T6120] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.081693][ T5837] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 111.160668][ T6134] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 111.922893][ T6145] FAULT_INJECTION: forcing a failure. [ 111.922893][ T6145] name failslab, interval 1, probability 0, space 0, times 0 [ 111.971360][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT(full) [ 111.971399][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.971414][ T6145] Call Trace: [ 111.971423][ T6145] [ 111.971433][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 111.971475][ T6145] should_fail_ex+0x512/0x640 [ 111.971504][ T6145] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 111.971544][ T6145] should_failslab+0xc2/0x120 [ 111.971583][ T6145] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 111.971614][ T6145] ? stack_trace_save+0x8e/0xc0 [ 111.971651][ T6145] ? __d_alloc+0x35/0xa80 [ 111.971680][ T6145] ? __d_alloc+0x35/0xa80 [ 111.971700][ T6145] __d_alloc+0x35/0xa80 [ 111.971729][ T6145] d_alloc_parallel+0x111/0x1510 [ 111.971775][ T6145] ? find_held_lock+0x2b/0x80 [ 111.971813][ T6145] ? __pfx_d_alloc_parallel+0x10/0x10 [ 111.971870][ T6145] ? __d_lookup+0x266/0x4a0 [ 111.971914][ T6145] lookup_open.isra.0+0x66c/0x1780 [ 111.971959][ T6145] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 111.972000][ T6145] ? find_held_lock+0x2b/0x80 [ 111.972045][ T6145] ? __pfx_down_write+0x10/0x10 [ 111.972082][ T6145] path_openat+0xa95/0x3140 [ 111.972135][ T6145] ? __pfx_path_openat+0x10/0x10 [ 111.972185][ T6145] do_filp_open+0x20b/0x470 [ 111.972225][ T6145] ? __pfx_do_filp_open+0x10/0x10 [ 111.972294][ T6145] ? alloc_fd+0x471/0x7d0 [ 111.972347][ T6145] do_sys_openat2+0x121/0x290 [ 111.972378][ T6145] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.972425][ T6145] __x64_sys_openat+0x174/0x210 [ 111.972457][ T6145] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.972502][ T6145] do_syscall_64+0xcd/0xf80 [ 111.972542][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.972567][ T6145] RIP: 0033:0x7fb4a358f7c9 [ 111.972591][ T6145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.972614][ T6145] RSP: 002b:00007fb4a43d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.972641][ T6145] RAX: ffffffffffffffda RBX: 00007fb4a37e5fa0 RCX: 00007fb4a358f7c9 [ 111.972658][ T6145] RDX: 0000000000008041 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 111.972674][ T6145] RBP: 00007fb4a3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.972691][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.972706][ T6145] R13: 00007fb4a37e6038 R14: 00007fb4a37e5fa0 R15: 00007ffd163e0848 [ 111.972746][ T6145] [ 112.942094][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.950893][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.959099][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.979971][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.988246][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.144441][ T6161] chnl_net:caif_netlink_parms(): no params data found [ 114.601451][ T6176] bond0: option all_slaves_active: invalid value () [ 114.770227][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.777812][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.799633][ T6161] bridge_slave_0: entered allmulticast mode [ 114.834130][ T6161] bridge_slave_0: entered promiscuous mode [ 114.853592][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.872903][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.932148][ T6161] bridge_slave_1: entered allmulticast mode [ 114.943620][ T6161] bridge_slave_1: entered promiscuous mode [ 115.081548][ T5845] Bluetooth: hci4: command tx timeout [ 115.229807][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.262200][ T6190] hub 1-0:1.0: USB hub found [ 115.267563][ T6190] hub 1-0:1.0: 1 port detected [ 115.306425][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.714484][ T6161] team0: Port device team_slave_0 added [ 115.870987][ T6161] team0: Port device team_slave_1 added [ 116.222388][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.249213][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.319182][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.401440][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.408494][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.502156][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.754679][ T6161] hsr_slave_0: entered promiscuous mode [ 116.781825][ T6161] hsr_slave_1: entered promiscuous mode [ 116.792757][ T6161] debugfs: 'hsr0' already exists in 'hsr' [ 116.798550][ T6161] Cannot create hsr debugfs directory [ 117.012718][ T6200] FAULT_INJECTION: forcing a failure. [ 117.012718][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 117.101332][ T6200] CPU: 1 UID: 0 PID: 6200 Comm: syz.3.61 Not tainted syzkaller #0 PREEMPT(full) [ 117.101373][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.101389][ T6200] Call Trace: [ 117.101398][ T6200] [ 117.101409][ T6200] dump_stack_lvl+0x16c/0x1f0 [ 117.101457][ T6200] should_fail_ex+0x512/0x640 [ 117.101493][ T6200] should_failslab+0xc2/0x120 [ 117.101536][ T6200] kmem_cache_alloc_node_noprof+0x86/0x800 [ 117.101570][ T6200] ? zswap_store+0x850/0x2800 [ 117.101607][ T6200] ? zswap_store+0x850/0x2800 [ 117.101633][ T6200] zswap_store+0x850/0x2800 [ 117.101680][ T6200] ? __pfx_zswap_store+0x10/0x10 [ 117.101710][ T6200] ? folio_free_swap+0x229/0x740 [ 117.101752][ T6200] ? do_raw_spin_unlock+0x172/0x230 [ 117.101786][ T6200] ? _raw_spin_unlock+0x28/0x50 [ 117.101820][ T6200] ? folio_free_swap+0x285/0x740 [ 117.101867][ T6200] ? rcu_is_watching+0x12/0xc0 [ 117.101911][ T6200] swap_writeout+0x3f4/0x1090 [ 117.101943][ T6200] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.101984][ T6200] shmem_writeout+0xc21/0x1140 [ 117.102021][ T6200] ? __pfx_shmem_writeout+0x10/0x10 [ 117.102056][ T6200] ? inode_to_bdi+0x9e/0x160 [ 117.102090][ T6200] ? folio_clear_dirty_for_io+0x112/0x6b0 [ 117.102134][ T6200] shrink_folio_list+0x2ffc/0x4bc0 [ 117.102176][ T6200] ? __pfx_shrink_folio_list+0x10/0x10 [ 117.102203][ T6200] ? find_held_lock+0x2b/0x80 [ 117.102249][ T6200] ? unwind_next_frame+0x3fe/0x20b0 [ 117.102286][ T6200] ? asm_exc_page_fault+0x26/0x30 [ 117.102312][ T6200] ? __kernel_text_address+0xd/0x40 [ 117.102341][ T6200] ? unwind_get_return_address+0x59/0xa0 [ 117.102377][ T6200] ? arch_stack_walk+0x88/0x100 [ 117.102457][ T6200] reclaim_folio_list+0xda/0x5a0 [ 117.102491][ T6200] ? __pfx_reclaim_folio_list+0x10/0x10 [ 117.102535][ T6200] ? lru_gen_update_size+0x543/0xe10 [ 117.102588][ T6200] ? lru_gen_del_folio+0x32b/0x540 [ 117.102633][ T6200] reclaim_pages+0x3ec/0x570 [ 117.102667][ T6200] ? __pfx_reclaim_pages+0x10/0x10 [ 117.102692][ T6200] ? find_held_lock+0x2b/0x80 [ 117.102729][ T6200] ? madvise_cold_or_pageout_pte_range+0x739/0x2100 [ 117.102766][ T6200] madvise_cold_or_pageout_pte_range+0x1624/0x2100 [ 117.102815][ T6200] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 117.102855][ T6200] ? __lock_acquire+0x436/0x2890 [ 117.102883][ T6200] ? stack_trace_save+0x8e/0xc0 [ 117.102930][ T6200] ? stack_depot_save_flags+0x29/0x9b0 [ 117.102965][ T6200] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 117.102998][ T6200] walk_pgd_range+0xc10/0x1f80 [ 117.103061][ T6200] ? __pfx_walk_pgd_range+0x10/0x10 [ 117.103099][ T6200] ? folios_put_refs+0x51d/0x750 [ 117.103133][ T6200] __walk_page_range+0x163/0x820 [ 117.103184][ T6200] walk_page_range_vma_unsafe+0x23f/0x9e0 [ 117.103227][ T6200] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 117.103274][ T6200] ? find_held_lock+0x2b/0x80 [ 117.103311][ T6200] ? mlock_drain_local+0x22d/0x4e0 [ 117.103351][ T6200] walk_page_range_vma+0x63/0x90 [ 117.103393][ T6200] madvise_pageout+0x257/0x540 [ 117.103437][ T6200] ? __pfx_madvise_pageout+0x10/0x10 [ 117.103513][ T6200] madvise_vma_behavior+0x912/0x29e0 [ 117.103544][ T6200] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 117.103589][ T6200] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 117.103617][ T6200] ? mas_prev+0x9b/0xf0 [ 117.103642][ T6200] ? __pfx_mas_prev+0x10/0x10 [ 117.103679][ T6200] ? find_vma_prev+0xd3/0x150 [ 117.103720][ T6200] ? find_held_lock+0x2b/0x80 [ 117.103757][ T6200] ? __pfx_find_vma_prev+0x10/0x10 [ 117.103813][ T6200] ? __futex_wait+0x24b/0x2f0 [ 117.103868][ T6200] madvise_walk_vmas+0x31f/0xac0 [ 117.103905][ T6200] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 117.103946][ T6200] madvise_do_behavior+0x1e2/0x530 [ 117.103969][ T6200] ? futex_private_hash_put+0x160/0x1b0 [ 117.103998][ T6200] ? __pfx_madvise_do_behavior+0x10/0x10 [ 117.104029][ T6200] ? down_read+0x13d/0x460 [ 117.104078][ T6200] do_madvise+0x176/0x240 [ 117.104105][ T6200] ? __pfx_do_madvise+0x10/0x10 [ 117.104131][ T6200] ? do_futex+0x122/0x350 [ 117.104193][ T6200] ? __do_sys_ioprio_get+0xc9/0x1280 [ 117.104238][ T6200] __x64_sys_madvise+0xa9/0x110 [ 117.104263][ T6200] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.104303][ T6200] do_syscall_64+0xcd/0xf80 [ 117.104349][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.104378][ T6200] RIP: 0033:0x7f17f618f7c9 [ 117.104403][ T6200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.104430][ T6200] RSP: 002b:00007f17f70a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 117.104459][ T6200] RAX: ffffffffffffffda RBX: 00007f17f63e5fa0 RCX: 00007f17f618f7c9 [ 117.104477][ T6200] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000 [ 117.104494][ T6200] RBP: 00007f17f6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.104511][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.104528][ T6200] R13: 00007f17f63e6038 R14: 00007f17f63e5fa0 R15: 00007ffdf8d6d4f8 [ 117.104569][ T6200] [ 117.174964][ T5845] Bluetooth: hci4: command tx timeout [ 118.104507][ T6161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.160302][ T6161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.234914][ T6161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.311493][ T6161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.899155][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.952189][ T5979] ------------[ cut here ]------------ [ 118.957759][ T5979] ODEBUG: free active (active state 0) object: ffff888068ad9460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 118.970688][ T5979] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: syz.1.12/5979 [ 118.979795][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.980771][ T5979] Modules linked in: [ 118.991298][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 119.000967][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.011839][ T5979] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 119.017719][ T5979] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 22 fa df 0b 41 56 48 8b 14 dd 60 c6 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 9c 83 d6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 119.037664][ T5979] RSP: 0018:ffffc90004bef708 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.045322][ T5979] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 119.054322][ T5979] RDX: ffffffff8bf2c5a0 RSI: ffffffff8bf2c180 RDI: ffffffff90928dd0 [ 119.062385][ T5979] RBP: 0000000000000001 R08: ffff888068ad9460 R09: ffffffff8b906bc0 [ 119.070433][ T5979] R10: ffffffff9088e6d7 R11: ffff88802e46c830 R12: ffffffff8bf2c180 [ 119.078505][ T5979] R13: ffffffff8b906c00 R14: ffffffff8a7e0920 R15: ffffc90004bef808 [ 119.086703][ T5979] FS: 0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 [ 119.095771][ T5979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.102494][ T5979] CR2: 00007fb4a37b42f8 CR3: 000000007556e000 CR4: 00000000003526f0 [ 119.110105][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.110586][ T5979] Call Trace: [ 119.117768][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.120973][ T5979] [ 119.120987][ T5979] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 119.121027][ T5979] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.142639][ T5979] debug_check_no_obj_freed+0x4b7/0x600 [ 119.149455][ T5979] ? find_held_lock+0x2b/0x80 [ 119.155467][ T5979] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 119.162037][ T5979] ? __page_table_check_zero+0x2f2/0x4a0 [ 119.167743][ T5979] ? __pfx___page_table_check_zero+0x10/0x10 [ 119.174295][ T5979] __free_frozen_pages+0x31a/0x1170 [ 119.179563][ T5979] hci_release_dev+0x4ef/0x640 [ 119.184450][ T5979] ? __pfx_hci_release_dev+0x10/0x10 [ 119.189796][ T5979] ? rcu_is_watching+0x12/0xc0 [ 119.194768][ T5979] ? kfree+0x27d/0x6e0 [ 119.198995][ T5979] bt_host_release+0x6a/0xb0 [ 119.203733][ T5979] ? __pfx_bt_host_release+0x10/0x10 [ 119.206704][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.209091][ T5979] device_release+0xa4/0x240 [ 119.209137][ T5979] kobject_put+0x1ef/0x6f0 [ 119.216305][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.220851][ T5979] put_device+0x1f/0x30 [ 119.237613][ T5979] vhci_release+0x185/0x230 [ 119.241535][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 119.242232][ T5979] ? __pfx_vhci_release+0x10/0x10 [ 119.257173][ T5979] __fput+0x402/0xb70 [ 119.261215][ T5979] task_work_run+0x150/0x240 [ 119.266844][ T5979] ? __pfx_task_work_run+0x10/0x10 [ 119.272112][ T5979] do_exit+0x87f/0x2bd0 [ 119.276301][ T5979] ? __pfx___might_resched+0x10/0x10 [ 119.281721][ T5979] ? __pfx_do_exit+0x10/0x10 [ 119.286438][ T5979] ? do_raw_spin_lock+0x12c/0x2b0 [ 119.291556][ T5979] ? find_held_lock+0x2b/0x80 [ 119.296381][ T5979] do_group_exit+0xd3/0x2a0 [ 119.300924][ T5979] get_signal+0x2671/0x26d0 [ 119.305577][ T5979] ? __pfx_get_signal+0x10/0x10 [ 119.310476][ T5979] ? kernel_move_pages+0xc60/0x12f0 [ 119.315818][ T5979] ? do_futex+0x122/0x350 [ 119.320206][ T5979] arch_do_signal_or_restart+0x8f/0x7a0 [ 119.325916][ T5979] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 119.332211][ T5979] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 119.338433][ T5979] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 119.344771][ T5979] exit_to_user_mode_loop+0x8c/0x540 [ 119.351688][ T5979] do_syscall_64+0x4ee/0xf80 [ 119.356358][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.363522][ T5979] RIP: 0033:0x7f4eedf8f7c9 [ 119.367990][ T5979] Code: Unable to access opcode bytes at 0x7f4eedf8f79f. [ 119.375095][ T5979] RSP: 002b:00007f4eec1cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 119.383669][ T5979] RAX: fffffffffffffff2 RBX: 00007f4eee1e6090 RCX: 00007f4eedf8f7c9 [ 119.391784][ T5979] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 119.399801][ T5979] RBP: 00007f4eee013f91 R08: 0000000000000000 R09: 8000400000000000 [ 119.407956][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.416018][ T5979] R13: 00007f4eee1e6128 R14: 00007f4eee1e6090 R15: 00007ffef929d748 [ 119.424131][ T5979] [ 119.427185][ T5979] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.434500][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 119.443647][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.453740][ T5979] Call Trace: [ 119.457063][ T5979] [ 119.460024][ T5979] dump_stack_lvl+0x3d/0x1f0 [ 119.464669][ T5979] vpanic+0x640/0x6f0 [ 119.468692][ T5979] ? debug_print_object+0x18e/0x2a0 [ 119.474037][ T5979] panic+0xca/0xd0 [ 119.477804][ T5979] ? __pfx_panic+0x10/0x10 [ 119.484709][ T5979] ? check_panic_on_warn+0x1f/0xb0 [ 119.489877][ T5979] check_panic_on_warn+0xab/0xb0 [ 119.494865][ T5979] __warn+0x108/0x3c0 [ 119.498904][ T5979] __report_bug+0x2a0/0x520 [ 119.503454][ T5979] ? debug_print_object+0x18e/0x2a0 [ 119.508706][ T5979] ? __pfx___report_bug+0x10/0x10 [ 119.513810][ T5979] ? __lock_acquire+0x436/0x2890 [ 119.518800][ T5979] report_bug_entry+0xe1/0x290 [ 119.523611][ T5979] ? debug_print_object+0x19b/0x2a0 [ 119.528860][ T5979] handle_bug+0x18a/0x260 [ 119.533243][ T5979] exc_invalid_op+0x17/0x50 [ 119.537798][ T5979] asm_exc_invalid_op+0x1a/0x20 [ 119.542685][ T5979] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 119.548527][ T5979] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 22 fa df 0b 41 56 48 8b 14 dd 60 c6 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 9c 83 d6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 119.568152][ T5979] RSP: 0018:ffffc90004bef708 EFLAGS: 00010246 [ 119.574236][ T5979] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 119.582225][ T5979] RDX: ffffffff8bf2c5a0 RSI: ffffffff8bf2c180 RDI: ffffffff90928dd0 [ 119.590205][ T5979] RBP: 0000000000000001 R08: ffff888068ad9460 R09: ffffffff8b906bc0 [ 119.598185][ T5979] R10: ffffffff9088e6d7 R11: ffff88802e46c830 R12: ffffffff8bf2c180 [ 119.606161][ T5979] R13: ffffffff8b906c00 R14: ffffffff8a7e0920 R15: ffffc90004bef808 [ 119.614141][ T5979] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 119.619637][ T5979] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 119.625110][ T5979] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.630938][ T5979] debug_check_no_obj_freed+0x4b7/0x600 [ 119.636505][ T5979] ? find_held_lock+0x2b/0x80 [ 119.641205][ T5979] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 119.647296][ T5979] ? __page_table_check_zero+0x2f2/0x4a0 [ 119.652995][ T5979] ? __pfx___page_table_check_zero+0x10/0x10 [ 119.659002][ T5979] __free_frozen_pages+0x31a/0x1170 [ 119.664226][ T5979] hci_release_dev+0x4ef/0x640 [ 119.669009][ T5979] ? __pfx_hci_release_dev+0x10/0x10 [ 119.674306][ T5979] ? rcu_is_watching+0x12/0xc0 [ 119.679094][ T5979] ? kfree+0x27d/0x6e0 [ 119.683185][ T5979] bt_host_release+0x6a/0xb0 [ 119.687820][ T5979] ? __pfx_bt_host_release+0x10/0x10 [ 119.693233][ T5979] device_release+0xa4/0x240 [ 119.697848][ T5979] kobject_put+0x1ef/0x6f0 [ 119.702367][ T5979] put_device+0x1f/0x30 [ 119.706543][ T5979] vhci_release+0x185/0x230 [ 119.711088][ T5979] ? __pfx_vhci_release+0x10/0x10 [ 119.716138][ T5979] __fput+0x402/0xb70 [ 119.720140][ T5979] task_work_run+0x150/0x240 [ 119.724779][ T5979] ? __pfx_task_work_run+0x10/0x10 [ 119.729909][ T5979] do_exit+0x87f/0x2bd0 [ 119.734074][ T5979] ? __pfx___might_resched+0x10/0x10 [ 119.739408][ T5979] ? __pfx_do_exit+0x10/0x10 [ 119.744007][ T5979] ? do_raw_spin_lock+0x12c/0x2b0 [ 119.749043][ T5979] ? find_held_lock+0x2b/0x80 [ 119.753739][ T5979] do_group_exit+0xd3/0x2a0 [ 119.758256][ T5979] get_signal+0x2671/0x26d0 [ 119.762793][ T5979] ? __pfx_get_signal+0x10/0x10 [ 119.767658][ T5979] ? kernel_move_pages+0xc60/0x12f0 [ 119.772869][ T5979] ? do_futex+0x122/0x350 [ 119.777217][ T5979] arch_do_signal_or_restart+0x8f/0x7a0 [ 119.782811][ T5979] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 119.788988][ T5979] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 119.795163][ T5979] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 119.801348][ T5979] exit_to_user_mode_loop+0x8c/0x540 [ 119.806651][ T5979] do_syscall_64+0x4ee/0xf80 [ 119.811264][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.817168][ T5979] RIP: 0033:0x7f4eedf8f7c9 [ 119.821589][ T5979] Code: Unable to access opcode bytes at 0x7f4eedf8f79f. [ 119.828608][ T5979] RSP: 002b:00007f4eec1cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 119.837033][ T5979] RAX: fffffffffffffff2 RBX: 00007f4eee1e6090 RCX: 00007f4eedf8f7c9 [ 119.845015][ T5979] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 119.853019][ T5979] RBP: 00007f4eee013f91 R08: 0000000000000000 R09: 8000400000000000 [ 119.861008][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.869084][ T5979] R13: 00007f4eee1e6128 R14: 00007f4eee1e6090 R15: 00007ffef929d748 [ 119.877085][ T5979] [ 119.880256][ T5979] Kernel Offset: disabled [ 119.886981][ T5979] Rebooting in 86400 seconds..