last executing test programs: 9.044546897s ago: executing program 1 (id=288): fcntl$auto(0xffffffffffffffff, 0x80000000, 0x1) r0 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap$auto(0x0, 0x88f, 0xffff, 0x9b72, r0, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\i\x8b5g\x1c\'\xe9\xcc\b\x1c\xc7', 0x81) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x2001, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x40000, 0x0) read$auto(r3, 0x0, 0x100000000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00') ioctl$auto(r5, 0x4020940c, r5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x900, 0x0) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) read$auto(r4, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) syslog$auto(0x3, 0x0, 0x5) 8.06639846s ago: executing program 3 (id=292): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/binder1\x00', 0x8080, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="28001d00", @ANYRES16=r3, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c38303231310008000a00ef010000"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc}QQU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\xb3x\xe5\f\x94\xf7\xb4\xcdm\x89\x7f\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\x93\xfe>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf*A)W\xac2\x93\xf2\x00\x00\x00r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\b\x00\x00\x00\x00\x00\x00\x00(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x3) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4082, 0xff2) setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000) 5.874664717s ago: executing program 3 (id=297): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/modalias\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/212, 0xd4) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000140)=@test={r0, 0x8, 0xf, 0x8, 0x5, 0x0, 0x3, 0xb1b9, 0x4, 0x8001, 0x5, 0x5, 0x81, 0x9, 0x1}, 0x3) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r1) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1ac, r2, 0xa, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x6}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x6e}, @NL802154_ATTR_SEC_KEY={0x36, 0x30, 0x0, 0x1, [@generic, @typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x5, 0xd4, 0x0, 0x1, [@generic="ad"]}, @generic="259d290b889dcc72ec0b8b1110256661da842dda4176"]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xcb9a}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x12a, 0x19, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @fd=r0}, @generic="9c1b64d3af7f4831f6f20e5e84df3883f1ca2e999e84ba1b41931d15bbb138a661bbe4fdb4ea117227867ca3824abe5cb6cd9f3893dc5adaadf771b1ab3e1f326d0ccf5f9aa8e22f5ed8c94c7ac0f6acf3a22ed1a0c7e99ab8847e7c6f56a700cf0bbc17a3bf8fff12ebf6974744523ad8a7358ddcafb85039e7458866448d44d8657756a02de6706da76762f7df10fb34e59e6a3584e6919305d3a7cd1c71cc", @generic="03a299224994f29b5f05d15ae89d27a13fec8afaca663e9620b08e54e2ba461811aa82f4daf5e31a9979fd0875d31eecbfe7035052c04ae0f30ebb0140cc9ca49dde7c649cdd76df098cfd947c021a23a3dd6bad2482cafb9a0e5f65cc5e8ad2638b10f678e697ee58e9", @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xc000001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r2, 0x210, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_PHY_CAPS={0x20, 0x18, 0x0, 0x1, [@typed={0x1a, 0x97, 0x0, 0x0, @binary="257b676037b70bf9e25c68d06f8343602d6b77a31dfa"}]}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0xfd}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xff}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xa}]}, 0x6c}}, 0x0) 5.643321197s ago: executing program 2 (id=299): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x25, 0x805, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x5, 0xfffffffffffffffc, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0x7, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xe0, 0x968b, 0x100, 0x15f4da07, 0x3, 0x3, 0x200000000fff, 0x8002001f, 0x1, 0x80080000002, 0x7, 0x2, 0x8]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r3, 0x0, 0x8080) mmap$auto(0x773d, 0x3ff, 0x1, 0x19, r3, 0x5) close_range$auto(0x2, 0x8, 0x0) 5.576710417s ago: executing program 3 (id=301): socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/extfrag/extfrag_index\x00', 0x101200, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, &(0x7f0000000300)=""/241, 0xfe62) write$auto(0x3, 0x0, 0xfdf3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 5.357519275s ago: executing program 3 (id=302): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000002c, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x3ff, 0x300000000000) 5.248483516s ago: executing program 1 (id=303): close_range$auto(0x2, 0x8, 0xff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket(0xa, 0x2, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0x113040, 0x0) close_range$auto(0x2, 0x8, 0x200000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000280)={0xde}) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f64a1d2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f00000004c0)={{0x7ff, 0x0, 0xffffffffffffffff, 0x7, 0x1, 0xffff180e, 0x3cb}, 0xcf, 0xf, 0x9, 0x6, @raw=0xff, @inferred, 0x8, 0x0, &(0x7f0000000a00)="438bf4de4a1ed4f836b8cf68061f6cd333de82e268fa77e081773f24c8e216c4d2dec05859b9b7b9e2ca7a93da70774492aea6c2eff675ba02e536e7112364fcd0e28d325f1d4653b848985ff9fdecbdd043b108e480d78bc4fb48374bea8fab1137c4c1db9776bd58149c53dcbbb5a12707c8fcf3b9b8fc49fe657374e1a821e9c24b9ba48e1db33132946887bcf59eea05fce7df3f3f303462508e242d403d6c9587dbaa773821284ab5555d0ec3272bbb34e4137a7956606c4f2221a15ed14a384e95bf4fb1958aa2699b1f5f39ed8d25413bef2aa6640505156e8d991eae90df83e48b0f78146f1aca9f52b7b62fb83d209f084d26859ab62b5a8c7edfbb1c1a72965f616675612d78b6b7fd61f4bac6b678b87300d2b61d8f7930e6c5812d049d36019a978f22d595ea68ee53295a463df3f1dde1fed86bdcbe8dec4f32c01f0786480958c9fc6315e11f30a44be975233ccad95972995ce61e504952c820b3cac2399d3c45c4ce3ba0f4483a18e57731a52d17412d2532ef71db599db7a4fa5cffe25c46a1ad2d5c0e837a7fff316876d325806c228d89e9620d876d1ee369fd1fb264ea022ddce200b1ac18868b0f004440996d1cbd13f329a8f52f65fe584e363ed3d25d19aa7c58cd41b0e65663efcf6ccdad982bb9f89cdb3b3d25ba59d018f9caee97e0bb46385925b6ce3772006077073c34838e18fdec868e55635d4d7217fc7c206a418685513246139f7b9cf6893442496996224950cfc9352ad140f27eedffd11b1050826b3ef029d8459c6bb24e33ace04b3582aec20ac3fefc23673ffa338bafd15895cdfeadd03a533fb490ee2fe36ae223c6c7bb50e7d7de536e5b9ed28f2a69c4ed3dbc1c86a7a29632bdb07ebebd03f203820b0c0cf7a6d08b5ee4d024f79fc6c9e1529e2f664bbc4cf558164986e3156e32e7764fe2bf9bd6f06bd4246b26e8e35ffa443d629571e2a08aefaefe76132eea40572abe50d1dcdcb757c5305a67cfe45d97566dc65541eff7d01c5b7f1df03a75629aa9a1ff935d8a81decbbf227f59d0d9272bb640af5839fb22fa31496a659a622263bf4eaad8b029657e38e3760cafadba10984161ed9153dd8cba63a726af04904bed115c463ac9cdecd23141a98abc575a6b0d2f1d245204d6307ede1b8aec80095b2a277b2a62a2c6abea883964f1c2001f9c2cb56580cd42da2be513adb9caeaace99e15f6639110e299dac429b00aae8e570ce15c7188adbae2f4d3033e4a8a44d997cd5440a09453ed5bf1d63467533499c2683fe2a990d35d53b631845e4f6dd104554e2213ad9cc5349ed63360c406fc65af4ade6e805144392cb1c264f12c57ab80dcd0b47c3916087625593da1eff5fef31de47cf820cb422982153b51c9c6379e36987d49b88ea16ab975940320742414caac0e68b4222f06c6eebd9129d6f314423c29fedd31fa177e21ee3163038e4445cce77872618c6b3c15ab135ece8034c0ee6d87091331e8d7965af43bbc7e29f3d3f587e46e0d7de6af77b02b8407fa0bbc33bf1d69d703d15823f209bca12fb75ee631dfa9d70ec7ba55204e91b4293186eb0fc85f7c175ac1584686a372d25840cc27322ceaaa8d5fdbdcef81d5f9e12d8c98fd3c4e33c32d168f26b08ce5000021ebc9d59b1dfb9a3363779cd8bc9ccb927ae8692b526302bfb28e2262f285318cf5d0628df0eebe0b3e1874570481d908d7443e82f649386907885e145bfe9a8db76f3d9913823150e3727a54e3c441db1cbfe9ad94c7b27b870d15bb90b5801f615e26c088e00957549ff66590e8ee17355098812a4b045053020c767e04f03aa0120c1c3b6ea8df3f0240df459c0afd42df4146e90392827268a0be7704dc49eda5f94da64b723ffbf4ce1a08abd29eb4a963c7dd560edb2ef1dadd40f62db7640988cf7266f4bbe340b49451591cdd1f1455b587bc81caed61af7f467c0e13a5736f862c1beb0d4657e2e9ad9b262c9e5974d57467e4ba46e91e9efa4be604bd16db57d91f443672ba4e2cb748a3c7ccd6520f000fbe9a5200a3513d3d690d6da5ce7dd90c2eec6c9b2c37595617416f8fab27b7a0f96c99952456b4750986c3ba3911853493c3aee11f2b699c9f2ee1a4ca2e7048e985857c34e394c66dd1af7a129fde192601e958126b09b2c82ebc2693c597bc40ce5d5005a5af6e566f697989c433ecaff67dabad8c524fb86d74b71a824194ab4acf350133fd2a19031d0d226ac9ff3ee34b389f3ef5108226027b4664061be0755f7018e2e4b5ba3a53d6d9698dcc149f0404e4ef1f7c202c9596049f4d9354251fe6cff9da1e40954f81a1c1f19c689529bbe2e43f34ea961cb8a4575ec275e04802d60cdc8091ad110d66f1bc23df95e5cbf019a9b67ea62227eedf29324337402f5b7de3162ed4a675ad60d6ba64dee8e4b5cc83c32879d5cd22e5d79a6574730f0dfe9099223e749b7956b4167bd55b1b6a1d37e202a284ff086cd5b24b22ea5f6d052c6abd8bf8b640e82a0a7c4dfc2254f07f5f58e8ba19a66503e0d9d88f0bba05f13b3ebefe1fb484b356c77fe6d2a7092689772eb4a7fc7f0d6b56b77edbc0098becdc6fddb1512d0573e58ebd4a89e4f83f0636c207bbb6327b7ac6f161f430f37530e385283ccf451073341455d5a8cbd3cdef8aeb5803b4921d68a2107a63f310b7c03fa1b23f0df67293285fc61596e51b827591c88ac4841edafdc9795ae91c7ed73c16064ba3d00171d4171ddeb7af1f455674d44448caff0d86c0a83110d76ee2afaaf661451ded2678f5c4add600f34ee9fb2b341d588551409864fb4992d6cdec45544e00c2a7abcc56f8bb9ab6c6c198e971edbd99d0c2bf7ab964691de6c0b96056e28c19e9bedc388b254dcf318a614ac540f7e8a5ce4e9f73912ee96cc68e88967f7131cd4573bc43135c087dad4daa466b25adc361140a285c7f30103ae8edb981b4a12e04999d0729a52a1bbd14a8e0c176eff96a0bf12d1daa6511b6b0d5a799d0587d641e04cdfee2bca3ec0a18edd48b86ded18419fb85172142366914b08bf064889a13509dcdb2ac7d2b775923f4d4b94142c82a93c340afe8399097fb918a03686a139c076f6a6b438053837a0c66834661e2ecfa029472e9721c30de62105d6a03116bafc7ad30040378b34944f499430d0d47ef9ecb179543cf8abd1dd085edae0d227da42f3328f286919db21076a2efaea263d53c2b64d7ceffdb2d119c2fb58eaf94631be7c309e7a83f7f14cf5029ee38b56e3b7ca4d7ff0eab9cfb5bc78eb3036cf75556634293b06e6e19d7a6415481bad4ad7f47f249c700fb81a0821e7c7f285f3e81d39439f15a8e3300c4186407a2349463b5147455900accf23df58d5fe2ad7d034ecbcf563aab7aa9310c6fd90abe39217ba20cbe9ca12a5305c4a32b23220e8e4ff6dd6594bef6461c0676d45928b98f1b5adcc8872968ba48fe8c520e8b0346e5aa414b4e2d0c04c95acb07cdfbe49a4fc8a88f52c01ddab75bb6b895c5d56161745e753392f42dc60c148ccea3d864f143a42bf3573b672d6c6cd35d8583e7990ad5971581a1ef60ea77877c66c0ae0a65088cdc408312e87707cc811b845c71bb4ca34324f810aab57536e0a53a89ca73b3de09849c02f5c81fb2e68c6f2fca8ed32b43c9f580ad072718feb5892b244f87e7fe6f31c08372974d3d558b7440e0dbbbb4be955263419936e4917d25428df590d3e6a81cbfa050ef2cf004c5ed165e3a9687f372c18b9501f11097eacadc5466d5acdd48efa5c8b3ed66c7b6cec84c522ac24eedb41acfcb87a2531ec838e496e6495f254bb6a47efeff53d54d3002bc8afd18612553f0b970b9f114fc9680e8e51e868969e85e9905afb788875ae19663de46fbab3b75b23dace61897ca890e0023f77dc7da5cb259814f5590689dc720c8117da9f59600979d356c212aa2d0289f85095973877ff6e7d2032e5de8839942c3ca73ca6301ce158d6ece8eeb2a0653826214bb2025fe8ed63f8c4327fc23fe1de01002100e51b1a304729a199048144ee32eba2aa4bc2ee8b21eabe0259a0fe5d4b03114fb227a81ef4c0fdfb7e9c55bc407f2f12e9a0079412e2a35340fe8b5f946add9065e676da89ded250ad691e3ba00748f01f84666fa2c5d8dc2d4ee848389432783879be50ea818904d4dac62d10c319af72bc62426b302293e251a49233dafbd47b2926208e9c18593c756f05556b2b3d267edbd3fe0ccecbb9360c8b896d9c269573fd1322b93197e388e324cc04e6798d44c3b360f75301dccf76a14833daeb5da13106ab06c3124f18882597b3548a58b9ae41b176275f0fe35a44e63257a547bda8222ccd7ed3b44b61c7a252a82f9c6a476eee32c041ebdfb80486e2948efc8d6f3c782306f1a545e654b4c7dd66e94d5993d0f47312f12e903aecea641a60b7dddf3172737bc651d22cd4bb7fe9516a6d6f3aa98b323dbe1d505797d28d2d3d58943b4e1083eb8aceaabc26560bf92cd963837701868d3cb1290c1288c8eb682718b49b4448c3105af07f5219064d9131026ef84d3440be2fec612a6687f89a8eb66b3a892fd25cd3608c48e9fe937b657501f48fb1b1bbac9b1e1ebb3a4e2fed7871c3432c26770a9b75d5e8cb0d01ff59ffb77e64340867be7678f19ef3a276a046ef40b16662c1cb5ca27bcacb52ee85d9bb329bb2209eaa7ad6befb85f7caee1b1974b5b0f85bf0d37c2be80043263097cad6e51198ab2c7b69addc0a6adbd0eb96c3a0442b5784822cbdba170172c83301ff88fe265db0f40e27d6d0cca41ba67b11859cf97f35d225526378edd810b5100abd1ff28e79698afb8ccaaa315a48296c2b9765d44eac19aa22760aa141687dbde2b3cd68cfbaed374b17136d109d25100617d22ae414beccc49bc9e3590362ad9de9c17d96039091cb2df5b025c36ce3cbc0967a606b804d4027f02e91990e9dca2e5dbc77db69e94fd51a55ff43d4552d2acff75ca2570ecabea49f904e5a9f707b1ecf432fb84e2144bb62d9eb88bc533f0a3588718018744b55f4e1e0698333031b04f5a65876f6e3e1736d21f2046f012125f415a603e57a51cbc8fad9e52dfbcd73d55e6f92c16bfd5658e9d952ba6df4cd772161d32b10ce1e4cc83ea8a07fcacc9fc86d081b6b48082ddef6144e91865bf574489870808f0e6581ddda1178f74e657829caaa11210004de33e3bef881ca30dc01aa87f712192f8d186b480b4f7a6b31309896afe53719647f6f6328aa221d878844109870a73e1510480134a80d17ce78c93d7c799924db76ee73ffcbee52518379e3259b54eadf5e9f1179edf6c2084e1d6a8d709469efa9927954ed08689e2165d27cae8de966556ae269dbe8f37f2b2fea32e5cd543b92935290d61f3e9548be9bb275cdc1d238bd0d116ee696a2e808011eca0c602c6999558fe67b914e90471a6249667561a1b3b62abdbc3402c0d0520557da4d8c3e061ba50658f9bb473a9fc35b575610683d96c2c5b333e022f0c6dd976e653c18f01f03319619424427c36e49dde1d90191d67f3020c6dc33441e685b7d197f06838b19c4e811d1a411cafd4751a7cfb518f557a3ae459a79dda4e2c2e304c640c8bf6352c40c87eeeabf9822ad6a1b64086d89765b162bbf5f24dd3c8c5da92695d50aa3eddf3d20ec321b548a5e34d633fe667e4547dd4d10449d66e5ad143b8a26875e2ca2eba27083652eb1fce7ad8c5646cdbcb355c57c8cf5e9cf1b0e865b72b484cffdb23be", &(0x7f0000000400)="4263ec0b6d9308d140e6c12cf2713ec9172ab812eb5f48d938bcf5226f02830013d6ba56eba33b7a33c5e56fb27e01c34c838aa59b6dede86120a6e9b019b9ef6a4f818982bbe712a644988a209788f5b263532eeccbb7c90f84e24b408973c2cd2795ecebf4c032a18374c71c93b0bb4e1a70fd3dd709307a524367ce018be60342467e364348f588daa368174658dc853903b81227f86fa151acfa76da4fe73010fbb336ee1487a3fe29c699ffa4607a0407c603fb299e3e57bd"}) shmctl$auto_SHM_STAT_ANY(0xa, 0xf, &(0x7f0000000380)={{0x80000000, 0x0, 0xee01, 0xcb900000, 0x8, 0x800, 0xa1c2}, 0x5e, 0x6, 0x800416, 0xffffffffec25a26d, @inferred=0xffffffffffffffff, @raw=0x2, 0xffff, 0x0, &(0x7f0000000240)="333184c9288bf44d8f18bcd44e7f", &(0x7f0000000300)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) 5.186834761s ago: executing program 3 (id=304): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, 0x0, 0x55) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0xa8201, 0x0) listen$auto(0xffffffffffffffff, 0x611e) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) socketpair$auto(0x20, 0x1005, 0x1b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) 4.531668086s ago: executing program 2 (id=305): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) 4.228512133s ago: executing program 2 (id=306): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/binder1\x00', 0x8080, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="28001d00", @ANYRES16=r3, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c38303231310008000a00ef010000"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc}QQU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\xb3x\xe5\f\x94\xf7\xb4\xcdm\x89\x7f\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\x93\xfe>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf*A)W\xac2\x93\xf2\x00\x00\x00r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\b\x00\x00\x00\x00\x00\x00\x00(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x3) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4082, 0xff2) setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000) 4.117753131s ago: executing program 1 (id=307): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x8080, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="28001d00", @ANYRES16=r3, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c38303231310008000a00ef010000"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc}QQU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\xb3x\xe5\f\x94\xf7\xb4\xcdm\x89\x7f\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\x93\xfe>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf*A)W\xac2\x93\xf2\x00\x00\x00r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\b\x00\x00\x00\x00\x00\x00\x00(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x3) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4082, 0xff2) setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000) 3.861179997s ago: executing program 3 (id=308): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6ae22, 0x0) mmap$auto(0xffffffff, 0x810004, 0x6, 0x4008000000008011, r0, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x8400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0xfffffffffffff34b, 0x8592) mkdir$auto(0x0, 0x9) socket(0x25, 0x805, 0x3) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0x7, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xe0, 0x968b, 0x100, 0x15f4da07, 0x3, 0x3, 0x200000000fff, 0x8002001f, 0x1, 0x80080000002, 0x7, 0x2, 0x8]}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r4, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r5, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) mmap$auto(0x773d, 0x3ff, 0x1, 0x19, r4, 0x5) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 3.592414919s ago: executing program 0 (id=309): mmap$auto(0x0, 0x400000, 0x80000000000df, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x70, 0x0, &(0x7f0000000240)=0x10009b) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x3, 0x7) fcntl$auto(0x8000000000000001, 0x25, 0x8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) socket(0x10, 0x2, 0x6) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/mdio_bus/drivers/RTL8226B_RTL8221B 2.5Gbps PHY/uevent\x00', 0x58bc80, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) ioctl$auto(r1, 0x4008550c, r1) 2.59427101s ago: executing program 0 (id=310): r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f0000000080)="794703", 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r1) sendmsg$auto_IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf25230000001400010067656e65766531000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4401}, 0x4020) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) socket(0xa, 0x2, 0x73) (async, rerun: 32) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b74, 0x2, 0x8002) (async) io_uring_setup$auto(0x1, &(0x7f00000002c0)={0x3, 0xdb000000, 0x606, 0x3ff, 0xe385, 0x6, r1, [0x1, 0x1, 0x3], {0x1, 0x10000, 0x6, 0x7f, 0x239, 0xf95, 0xc, 0x0, 0x1}, {0x4, 0x81, 0x7, 0x80, 0x7ff, 0x4, 0x2, 0x7, 0x3}}) (async, rerun: 32) r4 = socket(0xa, 0x801, 0x84) (rerun: 32) r5 = getsockopt$auto(r4, 0x84, 0x6c, 0x0, 0x0) (async, rerun: 64) socket(0x1, 0x5, 0xff) (async, rerun: 64) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x6b) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async, rerun: 32) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async, rerun: 32) r7 = setfsuid$auto(0xee00) (rerun: 32) setreuid$auto(r7, 0x0) (async) pidfd_send_signal$auto(r5, 0x305, &(0x7f0000000340)={@siginfo_0_0={0xfffffffe, 0x6, 0xfff, @_sigchld={r6, r7, 0xfffffff7}}}, 0x21bf) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) read$auto(0x3, 0x0, 0x80) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0xfff) (rerun: 64) shutdown$auto(r3, 0xc) (async, rerun: 64) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESDEC=r0, @ANYBLOB="7c5019533c7523f54f40b7b6d9762b54c4eb73d7e963ef16457bc2e1adf67ceeafd30fec70bc3c98d16702d324ed621d7c81e6012cd3e0a76577dd653d5c0009477597988186c1c8f9b48bb34e332a9329a871198dbd28cee7f82553d26ce7626d1d936b545211776b161b2fc7f1d368a380dd130c63227e2aeac24210f33f"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x81) (rerun: 64) 2.565397017s ago: executing program 2 (id=311): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) (async) r1 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) (async) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x5}, 0x2, 0x100) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xffff59e7, 0x3, 0x100, 0x9df, 0x7fffffff, 0x3, 0x1, 0x7fffffffffffffff, 0xcb, 0x6b7, 0x0, 0xb4, 0x81, 0x8, 0x8, 0x101, 0x10001, 0x4, 0x100000001, 0x0, 0x0, 0x7, 0x7, 0x1, 0x10001, 0x40, 0x8, 0xf, 0x6, 0x10, [0x6, 0x2, 0xffff, 0x3, 0x7, 0x200000003, 0x10000, 0x5, 0x40, 0x9, 0x180, 0x1, 0x1000, 0x4, 0x4, 0x1, 0x100, 0x8, 0x7, 0x8000, 0xd1c7, 0x3, 0x8, 0xf36, 0x0, 0x6ba3, 0x3, 0x1, 0x7, 0x2, 0x4, 0xa, 0xfffffffffffffffd, 0x7, 0xa00, 0xfae9, 0x95, 0x0, 0x9, 0xfffffffffffffbff, 0x5, 0x7fff, 0x6]}, 0x4, 0xf) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22d02, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22d02, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x6, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) (async) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000000)="ba7e3c032108277c7af8a4976f88730f015b87bda185462299", 0x7) poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x8) 1.920499727s ago: executing program 0 (id=312): openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x40aa2, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/id\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x200000000003, 0x2f4a3a23) getsockopt$auto_SO_SNDTIMEO_NEW(r1, 0x68fa, 0x43, &(0x7f0000000000)='/dev/vhost-net\x00', &(0x7f0000000080)=0x10) ioctl$auto(r0, 0x4004af07, r0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) setitimer$auto(0x0, &(0x7f0000001840)={{0x1600000000}, {0x10000, 0x8000}}, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x0) write$auto_dfs_global_fops_debug(r2, &(0x7f0000000d80)="b1", 0x1) 1.892337346s ago: executing program 1 (id=313): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/hugetlb.1GB.usage_in_bytes\x00', 0x10b142, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) (async) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0x8a002, 0x0) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f00000001c0)=""/164, 0xa4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x302002, 0x0) (async) socket(0xa, 0x2, 0x88) socket(0x23, 0x80805, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/can/rcvlist_fil\x00', 0x100, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001740)='/sys/devices/virtual/vtconsole/vtcon1/name\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) (async) socket(0x10, 0x2, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 1.857235102s ago: executing program 0 (id=314): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) madvise$auto(0x9275, 0xffffffffffff0001, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x200000000007) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_getevents$auto(0x1, 0x1ff, 0x9, &(0x7f0000000080)={0xffffffff, 0xc, 0xffffffffffffffff, 0x9}, &(0x7f0000000180)={0x6}) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x98) setsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0x8000009, 0x2d, 0x0, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event0\x00', 0x242101, 0x0) 1.636172367s ago: executing program 1 (id=315): close_range$auto(0x2, 0x8, 0xff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket(0xa, 0x2, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0x113040, 0x0) close_range$auto(0x2, 0x8, 0x200000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000280)={0xde}) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f64a1d2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f00000004c0)={{0x7ff, 0x0, 0xffffffffffffffff, 0x7, 0x1, 0xffff180e, 0x3cb}, 0xcf, 0xf, 0x9, 0x6, @raw=0xff, @inferred, 0x8, 0x0, &(0x7f0000000a00)="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", &(0x7f0000000400)="4263ec0b6d9308d140e6c12cf2713ec9172ab812eb5f48d938bcf5226f02830013d6ba56eba33b7a33c5e56fb27e01c34c838aa59b6dede86120a6e9b019b9ef6a4f818982bbe712a644988a209788f5b263532eeccbb7c90f84e24b408973c2cd2795ecebf4c032a18374c71c93b0bb4e1a70fd3dd709307a524367ce018be60342467e364348f588daa368174658dc853903b81227f86fa151acfa76da4fe73010fbb336ee1487a3fe29c699ffa4607a0407c603fb299e3e57bd"}) shmctl$auto_SHM_STAT_ANY(0xa, 0xf, &(0x7f0000000380)={{0x80000000, 0x0, 0xee01, 0xcb900000, 0x8, 0x800, 0xa1c2}, 0x5e, 0x6, 0x800416, 0xffffffffec25a26d, @inferred=0xffffffffffffffff, @raw=0x2, 0xffff, 0x0, &(0x7f0000000240)="333184c9288bf44d8f18bcd44e7f", &(0x7f0000000300)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) 1.391498285s ago: executing program 2 (id=316): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, 0x0, 0x55) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0xa8201, 0x0) listen$auto(0xffffffffffffffff, 0x611e) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) socketpair$auto(0x20, 0x1005, 0x1b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) 882.917357ms ago: executing program 1 (id=317): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(r0, r0, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) msgctl$auto(0x5, 0x3, &(0x7f0000000180)={{0xffffff51, 0xee01, 0xffffffffffffffff, 0x80000000, 0xf7b2, 0x0, 0x6}, &(0x7f00000000c0)=0x1, &(0x7f0000000100), 0x4, 0x2, 0xfffffffffffffffa, 0x0, 0x8000000000000000, 0x1000, 0x4, 0x2, @inferred, @raw=0xa}) keyctl$auto(0x2000000000000017, 0x3ff, r4, 0x0, 0x4df84cb5) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x2) 700.35542ms ago: executing program 0 (id=318): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4c810}, 0x8800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4c810}, 0x8800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80100004800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) (async) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) request_key$auto(0x0, 0x0, 0x0, 0x9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) read$auto(0x3, 0x0, 0x7fffffff) (async) read$auto(0x3, 0x0, 0x7fffffff) sendfile$auto(r2, r1, 0x0, 0x48) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) (async) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) (async) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 60.246943ms ago: executing program 2 (id=319): unshare$auto(0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/pcm1p/sub3/hw_params\x00', 0x1900, 0x0) pread64$auto(r2, 0x0, 0xe, 0x100000000007) read$auto(r1, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8000, 0x6, 0xff}) read$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000340)=""/167, 0xa7) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0xa, 0x801, 0x84) sendmsg$auto_SMC_PNETID_FLUSH(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r4, @ANYRESOCT=r4, @ANYRES64=r4, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mtrr\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a2037", 0x18) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/notify_window_exits\x00', 0x202, 0x0) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x800, 0x4) (async, rerun: 64) socket(0x10, 0x3, 0x6) (rerun: 64) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) 0s ago: executing program 0 (id=320): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xcea0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) socket(0x2, 0x5, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x202802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2dc0, 0x0) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r0, 0x0, 0x30) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x159) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 84.420122][ T5815] cgroup: Unknown subsys name 'net' [ 84.509229][ T5815] cgroup: Unknown subsys name 'cpuset' [ 84.518189][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.177385][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.266033][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.273842][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.281950][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.289690][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.297284][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.304581][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.313009][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.321384][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.322005][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.342930][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.353735][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.360882][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.368447][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.370330][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.383895][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.385575][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.392200][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.400218][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.406405][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.418945][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.829363][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.953616][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.084091][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 89.094868][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.103371][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.111027][ T5826] bridge_slave_0: entered allmulticast mode [ 89.119007][ T5826] bridge_slave_0: entered promiscuous mode [ 89.131434][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.138703][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.146214][ T5826] bridge_slave_1: entered allmulticast mode [ 89.154025][ T5826] bridge_slave_1: entered promiscuous mode [ 89.248512][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.267311][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.300779][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.310203][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.318326][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.326117][ T5825] bridge_slave_0: entered allmulticast mode [ 89.333427][ T5825] bridge_slave_0: entered promiscuous mode [ 89.381311][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.388692][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.396060][ T5825] bridge_slave_1: entered allmulticast mode [ 89.403490][ T5825] bridge_slave_1: entered promiscuous mode [ 89.460248][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.470339][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.477519][ T5824] bridge_slave_0: entered allmulticast mode [ 89.484586][ T5824] bridge_slave_0: entered promiscuous mode [ 89.496217][ T5826] team0: Port device team_slave_0 added [ 89.524021][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.531468][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.539184][ T5824] bridge_slave_1: entered allmulticast mode [ 89.546939][ T5824] bridge_slave_1: entered promiscuous mode [ 89.555191][ T5826] team0: Port device team_slave_1 added [ 89.563462][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.576657][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.680223][ T5825] team0: Port device team_slave_0 added [ 89.686670][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.693798][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.702198][ T5830] bridge_slave_0: entered allmulticast mode [ 89.709293][ T5830] bridge_slave_0: entered promiscuous mode [ 89.719304][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.731815][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.741819][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.748840][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.774794][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.789515][ T5825] team0: Port device team_slave_1 added [ 89.810127][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.817611][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.824757][ T5830] bridge_slave_1: entered allmulticast mode [ 89.832801][ T5830] bridge_slave_1: entered promiscuous mode [ 89.864134][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.871196][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.897459][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.942237][ T5824] team0: Port device team_slave_0 added [ 89.958345][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.966064][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.992423][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.017020][ T5824] team0: Port device team_slave_1 added [ 90.038015][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.044960][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.071892][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.086259][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.098235][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.152109][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.159411][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.185780][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.232996][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.240053][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.266374][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.300370][ T5826] hsr_slave_0: entered promiscuous mode [ 90.308844][ T5826] hsr_slave_1: entered promiscuous mode [ 90.318407][ T5830] team0: Port device team_slave_0 added [ 90.327568][ T5830] team0: Port device team_slave_1 added [ 90.351820][ T5825] hsr_slave_0: entered promiscuous mode [ 90.360311][ T5825] hsr_slave_1: entered promiscuous mode [ 90.366525][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.374189][ T5825] Cannot create hsr debugfs directory [ 90.380603][ T50] Bluetooth: hci0: command tx timeout [ 90.452368][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.455237][ T5834] Bluetooth: hci2: command tx timeout [ 90.462774][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.464985][ T50] Bluetooth: hci1: command tx timeout [ 90.494884][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.509537][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.516537][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.535182][ T50] Bluetooth: hci3: command tx timeout [ 90.542685][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.580932][ T5824] hsr_slave_0: entered promiscuous mode [ 90.587293][ T5824] hsr_slave_1: entered promiscuous mode [ 90.593333][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.601301][ T5824] Cannot create hsr debugfs directory [ 90.702901][ T5830] hsr_slave_0: entered promiscuous mode [ 90.709501][ T5830] hsr_slave_1: entered promiscuous mode [ 90.716083][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.723662][ T5830] Cannot create hsr debugfs directory [ 91.073147][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.093982][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.111629][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.127639][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.160524][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.173455][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.201861][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.212934][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.278803][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.292723][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.303005][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.314156][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.397174][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.410231][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.434105][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.444977][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.544912][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.601856][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.644376][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.651581][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.669341][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.711146][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.718328][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.750431][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.783414][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.815811][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.850711][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.869465][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.876645][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.913668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.920981][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.964926][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.989839][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.997090][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.017239][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.024407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.061608][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.068815][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.110786][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.118036][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.277588][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.448696][ T5826] veth0_vlan: entered promiscuous mode [ 92.465257][ T50] Bluetooth: hci0: command tx timeout [ 92.508657][ T5826] veth1_vlan: entered promiscuous mode [ 92.536098][ T50] Bluetooth: hci1: command tx timeout [ 92.540745][ T5834] Bluetooth: hci2: command tx timeout [ 92.616575][ T5834] Bluetooth: hci3: command tx timeout [ 92.618099][ T5826] veth0_macvtap: entered promiscuous mode [ 92.661503][ T5826] veth1_macvtap: entered promiscuous mode [ 92.737764][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.774406][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.830083][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.840011][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850373][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.859689][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.868574][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.917967][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.937689][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.027173][ T5830] veth0_vlan: entered promiscuous mode [ 93.065397][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.073445][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.120750][ T5830] veth1_vlan: entered promiscuous mode [ 93.154450][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.163680][ T5824] veth0_vlan: entered promiscuous mode [ 93.169856][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.197099][ T5825] veth0_vlan: entered promiscuous mode [ 93.214641][ T5824] veth1_vlan: entered promiscuous mode [ 93.231923][ T5830] veth0_macvtap: entered promiscuous mode [ 93.243886][ T5825] veth1_vlan: entered promiscuous mode [ 93.264351][ T5830] veth1_macvtap: entered promiscuous mode [ 93.299400][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.334390][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.361029][ T5824] veth0_macvtap: entered promiscuous mode [ 93.372113][ T5825] veth0_macvtap: entered promiscuous mode [ 93.387315][ T5824] veth1_macvtap: entered promiscuous mode [ 93.411809][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.430566][ T5825] veth1_macvtap: entered promiscuous mode [ 93.447860][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.458024][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.464628][ T5917] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 93.472286][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.483272][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484838][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.555384][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.581538][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.633746][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.650408][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.664268][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.673147][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.689619][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.723578][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.760338][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.769402][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.782821][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.788793][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.803390][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.812551][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.980696][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.016979][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.257084][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.264960][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.265174][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.299397][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.366352][ T5930] Zero length message leads to an empty skb [ 94.404353][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.449701][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.504290][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.535374][ T5834] Bluetooth: hci0: command tx timeout [ 94.551840][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.615321][ T5834] Bluetooth: hci2: command tx timeout [ 94.615940][ T50] Bluetooth: hci1: command tx timeout [ 94.705612][ T50] Bluetooth: hci3: command tx timeout [ 95.515688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.524205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.730109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.206047][ T50] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 96.615168][ T50] Bluetooth: hci0: command tx timeout [ 96.697305][ T50] Bluetooth: hci2: command tx timeout [ 96.698051][ T5834] Bluetooth: hci1: command tx timeout [ 96.785109][ T5834] Bluetooth: hci3: command tx timeout [ 96.792301][ T9] cfg80211: failed to load regulatory.db [ 97.131808][ T5976] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 97.160268][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 97.313713][ T30] audit: type=1800 audit(1751542385.762:2): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="dummy_udc" dev="gadgetfs" ino=6041 res=0 errno=0 [ 97.347771][ T5979] .SR: entered promiscuous mode [ 97.389995][ T5979] Invalid ELF header magic: != ELF [ 98.163573][ T6005] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.217366][ T5979] could not allocate digest TFM handle [ 98.662686][ T6005] netlink: set zone limit has 8 unknown bytes [ 99.108590][ T6022] netlink: 'syz.0.22': attribute type 2 has an invalid length. [ 99.139775][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 99.151859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.568051][ T6028] netlink: 'syz.0.23': attribute type 2 has an invalid length. [ 99.685353][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 99.733935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.751512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.785672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.851881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.860918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.870425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 100.629187][ T30] audit: type=1800 audit(1751542389.082:3): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="dummy_udc" dev="gadgetfs" ino=6041 res=0 errno=0 [ 100.986955][ T6060] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 101.196113][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 101.294472][ T6068] .SR: entered promiscuous mode [ 101.401354][ T6068] Invalid ELF header magic: != ELF [ 101.604666][ T6079] .SR: entered promiscuous mode [ 101.700084][ T6077] netlink: zone id is out of range [ 101.715179][ T6072] netlink: set zone limit has 8 unknown bytes [ 101.718598][ T6079] Invalid ELF header magic: != ELF [ 101.954528][ T6068] could not allocate digest TFM handle [ 102.222065][ T6090] netlink: 'syz.3.33': attribute type 2 has an invalid length. [ 102.260908][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 102.280763][ T6094] netlink: 'syz.2.34': attribute type 2 has an invalid length. [ 102.466303][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 102.713889][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 102.765994][ T6079] could not allocate digest TFM handle [ 102.776518][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 103.489620][ T30] audit: type=1800 audit(1751542391.942:4): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.36" name="dummy_udc" dev="gadgetfs" ino=6041 res=0 errno=0 [ 104.110055][ T6130] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 104.255998][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 104.490781][ T6132] netlink: zone id is out of range [ 104.572092][ T6138] netlink: set zone limit has 8 unknown bytes [ 104.740472][ T6143] openvswitch: .SR: Dropping previously announced user features [ 104.767352][ T6145] netlink: 'syz.3.44': attribute type 2 has an invalid length. [ 104.848876][ T6153] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 104.856562][ T6143] Invalid ELF header magic: != ELF [ 104.898708][ T6153] bridge0: port 3(vlan1) entered blocking state [ 104.905336][ T6153] bridge0: port 3(vlan1) entered disabled state [ 104.912122][ T6153] vlan1: entered allmulticast mode [ 104.917752][ T6153] veth0_vlan: entered allmulticast mode [ 104.932476][ T6153] vlan1: entered promiscuous mode [ 104.982951][ T6153] bridge0: port 3(vlan1) entered blocking state [ 104.989483][ T6153] bridge0: port 3(vlan1) entered forwarding state [ 105.154611][ T6164] netlink: 'syz.1.45': attribute type 2 has an invalid length. [ 105.238179][ T6154] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 105.611977][ T6153] zswap: compressor not available [ 105.696270][ T6177] Invalid ELF header magic: != ELF [ 105.775953][ T6143] could not allocate digest TFM handle [ 106.638095][ T6174] could not allocate digest TFM handle [ 107.953251][ T6217] netlink: 'syz.3.54': attribute type 2 has an invalid length. [ 108.287167][ T6228] netlink: zone id is out of range [ 108.406282][ T6216] netlink: set zone limit has 8 unknown bytes [ 108.860377][ T6236] netlink: 'syz.2.55': attribute type 2 has an invalid length. [ 108.920004][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 109.003430][ T6240] .SR: entered promiscuous mode [ 109.077084][ T6246] netlink: del zone limit has 8 unknown bytes [ 109.091642][ T6239] netlink: set zone limit has 8 unknown bytes [ 109.101008][ T6240] Invalid ELF header magic: != ELF [ 109.492601][ T6240] could not allocate digest TFM handle [ 109.814250][ T6266] openvswitch: .SR: Dropping previously announced user features [ 109.918136][ T6266] Invalid ELF header magic: != ELF [ 109.938205][ T6270] netlink: 'syz.3.64': attribute type 2 has an invalid length. [ 110.720065][ T6286] netlink: zone id is out of range [ 110.728027][ T6284] netlink: set zone limit has 8 unknown bytes [ 111.089441][ T6266] could not allocate digest TFM handle [ 111.828035][ T6300] mmap: syz.1.69 (6300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.129357][ T6303] syz.1.69 (6303) used greatest stack depth: 19800 bytes left [ 113.283287][ T6320] openvswitch: .SR: Dropping previously announced user features [ 113.463630][ T6320] Invalid ELF header magic: != ELF [ 113.716664][ T6320] could not allocate digest TFM handle [ 113.898157][ T6329] openvswitch: .SR: Dropping previously announced user features [ 114.101090][ T6329] Invalid ELF header magic: != ELF [ 114.159566][ T6337] netlink: 'syz.0.75': attribute type 2 has an invalid length. [ 114.250231][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 114.552029][ T6329] could not allocate digest TFM handle [ 114.778952][ T6344] netlink: set zone limit has 8 unknown bytes [ 114.789370][ T6346] netlink: zone id is out of range [ 115.645627][ T6361] netlink: zone id is out of range [ 115.694168][ T6366] netlink: set zone limit has 8 unknown bytes [ 115.986241][ T6372] openvswitch: .SR: Dropping previously announced user features [ 116.165630][ T6372] Invalid ELF header magic: != ELF [ 116.404511][ T6372] could not allocate digest TFM handle [ 117.349772][ T6392] netlink: 'syz.0.85': attribute type 2 has an invalid length. [ 117.500860][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 118.009644][ T6399] netlink: 'syz.1.95': attribute type 2 has an invalid length. [ 118.039092][ T6401] openvswitch: .SR: Dropping previously announced user features [ 118.099144][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 118.280460][ T6401] Invalid ELF header magic: != ELF [ 118.552859][ T6404] could not allocate digest TFM handle [ 119.033039][ T6423] netlink: set zone limit has 8 unknown bytes [ 119.077898][ T6427] netlink: zone id is out of range [ 119.171710][ T6425] netlink: set zone limit has 8 unknown bytes [ 119.206190][ T6425] netlink: zone id is out of range [ 119.492499][ T6434] openvswitch: .SR: Dropping previously announced user features [ 119.626730][ T6434] Invalid ELF header magic: != ELF [ 120.423436][ T6434] could not allocate digest TFM handle [ 120.582579][ T6453] netlink: 'syz.1.98': attribute type 2 has an invalid length. [ 121.220976][ T6467] FAULT_INJECTION: forcing a failure. [ 121.220976][ T6467] name failslab, interval 1, probability 0, space 0, times 1 [ 121.258052][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.1.100 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 121.258091][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.258111][ T6467] Call Trace: [ 121.258120][ T6467] [ 121.258134][ T6467] dump_stack_lvl+0x16c/0x1f0 [ 121.258189][ T6467] should_fail_ex+0x512/0x640 [ 121.258229][ T6467] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 121.258271][ T6467] should_failslab+0xc2/0x120 [ 121.258298][ T6467] __kmalloc_cache_noprof+0x6a/0x3e0 [ 121.258336][ T6467] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 121.258370][ T6467] ? kasan_save_track+0x14/0x30 [ 121.258415][ T6467] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 121.258452][ T6467] ? rcu_is_watching+0x12/0xc0 [ 121.258484][ T6467] ? __mutex_lock+0x1ca/0xb90 [ 121.258533][ T6467] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 121.258570][ T6467] ? __pfx___mutex_lock+0x10/0x10 [ 121.258622][ T6467] ? __fsnotify_parent+0x24b/0xc40 [ 121.258677][ T6467] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 121.258711][ T6467] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 121.258742][ T6467] snd_pcm_oss_sync+0x1de/0x840 [ 121.258779][ T6467] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 121.258811][ T6467] snd_pcm_oss_release+0x28b/0x310 [ 121.258844][ T6467] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 121.258876][ T6467] __fput+0x402/0xb70 [ 121.258912][ T6467] task_work_run+0x14d/0x240 [ 121.258956][ T6467] ? __pfx_task_work_run+0x10/0x10 [ 121.258999][ T6467] ? __pfx___do_sys_close_range+0x10/0x10 [ 121.259048][ T6467] exit_to_user_mode_loop+0xeb/0x110 [ 121.259094][ T6467] do_syscall_64+0x3f6/0x490 [ 121.259142][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.259171][ T6467] RIP: 0033:0x7f71fad8e929 [ 121.259201][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.259228][ T6467] RSP: 002b:00007f71fbbb2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 121.259258][ T6467] RAX: 0000000000000000 RBX: 00007f71fafb5fa0 RCX: 00007f71fad8e929 [ 121.259276][ T6467] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 121.259292][ T6467] RBP: 00007f71fae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.259308][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.259324][ T6467] R13: 0000000000000000 R14: 00007f71fafb5fa0 R15: 00007ffda8277468 [ 121.259360][ T6467] [ 122.313101][ T6480] openvswitch: .SR: Dropping previously announced user features [ 122.519970][ T6480] Invalid ELF header magic: != ELF [ 122.556173][ T6487] netlink: zone id is out of range [ 122.568919][ T6472] netlink: set zone limit has 8 unknown bytes [ 122.913338][ T6480] could not allocate digest TFM handle [ 122.962686][ T6499] openvswitch: .SR: Dropping previously announced user features [ 123.093049][ T6493] netlink: set zone limit has 8 unknown bytes [ 123.123946][ T6493] netlink: zone id is out of range [ 123.132861][ T6506] netlink: 'syz.0.108': attribute type 2 has an invalid length. [ 123.332368][ T6499] Invalid ELF header magic: != ELF [ 123.778680][ T6499] could not allocate digest TFM handle [ 124.048615][ T6529] __vm_enough_memory: pid: 6529, comm: syz.1.112, bytes: 4398046511104 not enough memory for the allocation [ 124.754572][ T5834] Bluetooth: hci1: unexpected event 0x04 length: 46 > 10 [ 125.897916][ T6554] netlink: zone id is out of range [ 126.015139][ T6553] netlink: set zone limit has 8 unknown bytes [ 126.775362][ T5834] Bluetooth: hci1: command tx timeout [ 126.947514][ T6570] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 128.088982][ T6592] openvswitch: .SR: Dropping previously announced user features [ 128.578175][ T6592] Invalid ELF header magic: != ELF [ 129.109491][ T6592] could not allocate digest TFM handle [ 130.246191][ T6617] netlink: set zone limit has 8 unknown bytes [ 130.257718][ T6628] netlink: zone id is out of range [ 131.385548][ T6647] netlink: set zone limit has 8 unknown bytes [ 131.402413][ T6648] netlink: zone id is out of range [ 131.467844][ T6646] netlink: zone id is out of range [ 131.481273][ T6644] netlink: set zone limit has 8 unknown bytes [ 131.760557][ T6655] netlink: 'syz.0.128': attribute type 2 has an invalid length. [ 132.239319][ T6657] could not allocate digest TFM handle [ 132.440614][ T6671] openvswitch: .SR: Dropping previously announced user features [ 133.077075][ T6671] could not allocate digest TFM handle [ 135.946160][ T6723] netlink: 'syz.3.142': attribute type 2 has an invalid length. [ 135.976844][ T6716] netlink: zone id is out of range [ 135.997380][ T6715] netlink: set zone limit has 8 unknown bytes [ 136.478369][ T6735] openvswitch: .SR: Dropping previously announced user features [ 136.887552][ T6735] could not allocate digest TFM handle [ 137.172183][ T6720] netlink: zone id is out of range [ 137.183141][ T6747] syz.3.145 uses obsolete (PF_INET,SOCK_PACKET) [ 137.587459][ T6725] netlink: set zone limit has 8 unknown bytes [ 137.740380][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.746843][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.676885][ T6767] netlink: zone id is out of range [ 139.691510][ T6765] netlink: set zone limit has 8 unknown bytes [ 140.180051][ T6772] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 141.154738][ T6785] openvswitch: .SR: Dropping previously announced user features [ 141.277451][ T6785] Invalid ELF header magic: != ELF [ 141.582310][ T6792] netlink: zone id is out of range [ 141.640777][ T6785] could not allocate digest TFM handle [ 141.692429][ T6787] netlink: set zone limit has 8 unknown bytes [ 143.580162][ T6815] netlink: zone id is out of range [ 144.745198][ T6834] netlink: 'syz.2.163': attribute type 2 has an invalid length. [ 145.079268][ T6841] openvswitch: .SR: Dropping previously announced user features [ 145.211013][ T6841] Invalid ELF header magic: != ELF [ 145.729500][ T6847] could not allocate digest TFM handle [ 146.141786][ T6859] netlink: zone id is out of range [ 146.166372][ T6854] netlink: set zone limit has 8 unknown bytes [ 146.498446][ T6864] netlink: zone id is out of range [ 147.336757][ T6879] netlink: 'syz.2.173': attribute type 2 has an invalid length. [ 147.729786][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 148.198444][ T6898] netlink: 'syz.1.183': attribute type 2 has an invalid length. [ 148.815873][ T6911] openvswitch: .SR: Dropping previously announced user features [ 148.882963][ T6913] Invalid ELF header magic: != ELF [ 149.162414][ T6911] could not allocate digest TFM handle [ 149.632901][ T6924] openvswitch: .SR: Dropping previously announced user features [ 149.794328][ T6922] netlink: zone id is out of range [ 149.876158][ T6924] Invalid ELF header magic: != ELF [ 150.189393][ T6924] could not allocate digest TFM handle [ 151.370919][ T6955] netlink: 'syz.3.187': attribute type 2 has an invalid length. [ 152.159730][ T6966] openvswitch: .SR: Dropping previously announced user features [ 152.278644][ T6973] Invalid ELF header magic: != ELF [ 152.995645][ T6966] could not allocate digest TFM handle [ 153.806258][ T6991] netlink: zone id is out of range [ 153.945380][ T6983] netlink: set zone limit has 8 unknown bytes [ 154.128173][ T6986] netlink: zone id is out of range [ 154.324218][ T6997] openvswitch: .SR: Dropping previously announced user features [ 154.450301][ T6997] Invalid ELF header magic: != ELF [ 155.124385][ T6997] could not allocate digest TFM handle [ 155.806811][ T7025] netlink: 'syz.0.197': attribute type 2 has an invalid length. [ 156.041485][ T7030] openvswitch: .SR: Dropping previously announced user features [ 156.265933][ T7030] Invalid ELF header magic: != ELF [ 156.708301][ T7047] netlink: 'syz.0.209': attribute type 2 has an invalid length. [ 156.832941][ T7030] could not allocate digest TFM handle [ 157.460667][ T7062] netlink: set zone limit has 8 unknown bytes [ 157.493746][ T7060] netlink: zone id is out of range [ 157.726595][ T7064] netlink: zone id is out of range [ 158.176319][ T7073] openvswitch: .SR: Dropping previously announced user features [ 158.239815][ T7073] Invalid ELF header magic: != ELF [ 158.409708][ T7071] netlink: set zone limit has 8 unknown bytes [ 158.420710][ T7078] netlink: zone id is out of range [ 158.593857][ T7073] could not allocate digest TFM handle [ 160.908099][ T7109] openvswitch: .SR: Dropping previously announced user features [ 161.003414][ T7109] Invalid ELF header magic: != ELF [ 161.319824][ T7119] netlink: 'syz.0.213': attribute type 2 has an invalid length. [ 161.445242][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 161.798435][ T7109] could not allocate digest TFM handle [ 161.951591][ T7132] netlink: 'syz.2.225': attribute type 2 has an invalid length. [ 162.079086][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 162.402604][ T7134] netlink: zone id is out of range [ 163.003305][ T7150] netlink: zone id is out of range [ 163.019604][ T7148] netlink: set zone limit has 8 unknown bytes [ 163.026753][ T30] audit: type=1800 audit(4294967343.270:5): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="dbroot" dev="configfs" ino=12561 res=0 errno=0 [ 165.176688][ T7170] openvswitch: .SR: Dropping previously announced user features [ 165.239686][ T7170] Invalid ELF header magic: != ELF [ 165.580033][ T7182] netlink: 'syz.2.228': attribute type 2 has an invalid length. [ 165.746069][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 166.211248][ T7170] could not allocate digest TFM handle [ 167.078438][ T7196] netlink: zone id is out of range [ 167.446965][ T7207] netlink: zone id is out of range [ 167.487369][ T7206] netlink: set zone limit has 8 unknown bytes [ 169.430933][ T7237] netlink: 'syz.1.237': attribute type 2 has an invalid length. [ 169.591749][ T7244] openvswitch: .SR: Dropping previously announced user features [ 169.765678][ T7244] Invalid ELF header magic: != ELF [ 170.396707][ T7244] could not allocate digest TFM handle [ 170.891007][ T7273] netlink: set zone limit has 8 unknown bytes [ 170.975144][ T7267] netlink: zone id is out of range [ 171.437157][ T7284] netlink: 'syz.0.250': attribute type 2 has an invalid length. [ 172.152741][ T7298] openvswitch: .SR: Dropping previously announced user features [ 172.269655][ T7302] Invalid ELF header magic: != ELF [ 173.022883][ T7298] could not allocate digest TFM handle [ 173.978870][ T5834] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 173.978906][ T5834] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 173.994711][ T5834] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 173.994763][ T5834] Bluetooth: hci1: adv larger than maximum supported [ 174.003752][ T5834] Bluetooth: hci1: adv larger than maximum supported [ 174.011379][ T5834] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 174.018476][ T5834] Bluetooth: hci1: Malformed LE Event: 0x0d [ 175.465904][ T7339] netlink: zone id is out of range [ 175.541474][ T7335] netlink: set zone limit has 8 unknown bytes [ 175.883647][ T7351] netlink: 'syz.0.260': attribute type 2 has an invalid length. [ 176.064160][ T7348] can: request_module (can-proto-5) failed. [ 176.112445][ T7349] can: request_module (can-proto-5) failed. [ 176.336524][ T7374] openvswitch: .SR: Dropping previously announced user features [ 176.462743][ T7374] Invalid ELF header magic: != ELF [ 177.372503][ T7375] could not allocate digest TFM handle [ 178.019291][ T7408] netlink: set zone limit has 8 unknown bytes [ 178.071007][ T7408] netlink: zone id is out of range [ 178.831238][ T7427] netlink: 'syz.2.272': attribute type 2 has an invalid length. [ 178.881873][ T7429] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.318764][ T7445] openvswitch: .SR: Dropping previously announced user features [ 179.570652][ T7445] Invalid ELF header magic: != ELF [ 180.253355][ T7445] could not allocate digest TFM handle [ 180.569271][ T7472] netlink: 342 bytes leftover after parsing attributes in process `syz.1.281'. [ 180.891414][ T7474] netlink: zone id is out of range [ 181.001895][ T7473] netlink: set zone limit has 8 unknown bytes [ 181.243710][ T7485] netlink: 'syz.0.284': attribute type 2 has an invalid length. [ 181.302502][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 181.664206][ T7497] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 181.730872][ T7497] netlink: 318 bytes leftover after parsing attributes in process `syz.3.286'. [ 182.000248][ T7510] FAULT_INJECTION: forcing a failure. [ 182.000248][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 182.019166][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.1.288 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 182.019214][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.019233][ T7510] Call Trace: [ 182.019243][ T7510] [ 182.019255][ T7510] dump_stack_lvl+0x16c/0x1f0 [ 182.019309][ T7510] should_fail_ex+0x512/0x640 [ 182.019346][ T7510] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 182.019388][ T7510] should_failslab+0xc2/0x120 [ 182.019412][ T7510] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 182.019448][ T7510] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 182.019475][ T7510] ? ptlock_alloc+0x1f/0x70 [ 182.019511][ T7510] ptlock_alloc+0x1f/0x70 [ 182.019541][ T7510] pte_alloc_one+0x82/0x3a0 [ 182.019585][ T7510] __handle_mm_fault+0x3a68/0x5490 [ 182.019626][ T7510] ? __pfx___handle_mm_fault+0x10/0x10 [ 182.019656][ T7510] ? __pfx_mt_find+0x10/0x10 [ 182.019697][ T7510] ? find_vma+0xbf/0x140 [ 182.019719][ T7510] ? __pfx_find_vma+0x10/0x10 [ 182.019746][ T7510] handle_mm_fault+0x589/0xd10 [ 182.019780][ T7510] ? __pkru_allows_pkey+0x41/0xb0 [ 182.019814][ T7510] do_user_addr_fault+0x7a6/0x1370 [ 182.019850][ T7510] ? rcu_is_watching+0x12/0xc0 [ 182.019897][ T7510] exc_page_fault+0x5c/0xb0 [ 182.019936][ T7510] asm_exc_page_fault+0x26/0x30 [ 182.019961][ T7510] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 182.019996][ T7510] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 57 f1 b0 fc 48 83 fd 07 76 22 e8 dc f5 b0 fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 08 f1 b0 fc 45 85 ff 0f 84 [ 182.020022][ T7510] RSP: 0018:ffffc90003a1fd10 EFLAGS: 00050246 [ 182.020043][ T7510] RAX: 000000000000003b RBX: 0000000000000000 RCX: ffffc9000c133000 [ 182.020060][ T7510] RDX: 0000000000080000 RSI: ffffffff850a9744 RDI: 0000000000000007 [ 182.020076][ T7510] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 182.020091][ T7510] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000000000000 [ 182.020106][ T7510] R13: ffff88806c686620 R14: 0000000000000fe0 R15: 0000000000000000 [ 182.020132][ T7510] ? strncpy_from_user+0x144/0x2e0 [ 182.020175][ T7510] getname_flags.part.0+0x8f/0x550 [ 182.020214][ T7510] getname_flags+0x93/0xf0 [ 182.020250][ T7510] do_sys_openat2+0xb8/0x1d0 [ 182.020278][ T7510] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.020320][ T7510] __x64_sys_openat+0x174/0x210 [ 182.020350][ T7510] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.020394][ T7510] do_syscall_64+0xcd/0x490 [ 182.020448][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.020472][ T7510] RIP: 0033:0x7f71fad8e929 [ 182.020491][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.020513][ T7510] RSP: 002b:00007f71fbbb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.020535][ T7510] RAX: ffffffffffffffda RBX: 00007f71fafb5fa0 RCX: 00007f71fad8e929 [ 182.020550][ T7510] RDX: 0000000000020342 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 182.020565][ T7510] RBP: 00007f71fae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 182.020579][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.020593][ T7510] R13: 0000000000000000 R14: 00007f71fafb5fa0 R15: 00007ffda8277468 [ 182.020623][ T7510] [ 182.515265][ T7519] Invalid ELF header magic: != ELF [ 182.565324][ T7512] openvswitch: .SR: Dropping previously announced user features [ 182.810349][ T7512] could not allocate digest TFM handle [ 184.398516][ T7547] netlink: set zone limit has 8 unknown bytes [ 184.409877][ T7546] netlink: zone id is out of range [ 184.666550][ T7552] netlink: 'syz.2.295': attribute type 2 has an invalid length. [ 186.483588][ T7590] netlink: set zone limit has 8 unknown bytes [ 186.554071][ T7589] netlink: zone id is out of range [ 189.181659][ T7631] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.649575][ T7636] netlink: zone id is out of range [ 189.766997][ T7641] netlink: set zone limit has 8 unknown bytes [ 190.277953][ T7650] openvswitch: .SR: Dropping previously announced user features [ 190.454278][ T7650] Invalid ELF header magic: != ELF [ 191.074348][ T7664] FAULT_INJECTION: forcing a failure. [ 191.074348][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 191.160697][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.2.319 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 191.160735][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.160750][ T7664] Call Trace: [ 191.160758][ T7664] [ 191.160768][ T7664] dump_stack_lvl+0x16c/0x1f0 [ 191.160810][ T7664] should_fail_ex+0x512/0x640 [ 191.160844][ T7664] ? __kmalloc_noprof+0xbf/0x510 [ 191.160882][ T7664] ? tracepoint_add_func+0x2a6/0xea0 [ 191.160916][ T7664] should_failslab+0xc2/0x120 [ 191.160939][ T7664] __kmalloc_noprof+0xd2/0x510 [ 191.160979][ T7664] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 191.161009][ T7664] tracepoint_add_func+0x2a6/0xea0 [ 191.161043][ T7664] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 191.161101][ T7664] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 191.161131][ T7664] tracepoint_probe_register+0xbf/0x100 [ 191.161169][ T7664] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 191.161206][ T7664] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 191.161237][ T7664] ? relay_open+0x62e/0xad0 [ 191.161272][ T7664] blk_register_tracepoints+0x75/0x380 [ 191.161311][ T7664] do_blk_trace_setup+0x933/0xb50 [ 191.161341][ T7664] blk_trace_setup+0xed/0x1b0 [ 191.161373][ T7664] ? __pfx_blk_trace_setup+0x10/0x10 [ 191.161399][ T7664] ? __pfx_snprintf+0x10/0x10 [ 191.161451][ T7664] blk_trace_ioctl+0x146/0x280 [ 191.161478][ T7664] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 191.161510][ T7664] ? find_held_lock+0x2b/0x80 [ 191.161533][ T7664] ? hook_file_ioctl_common+0x145/0x410 [ 191.161564][ T7664] blkdev_ioctl+0x108/0x6d0 [ 191.161592][ T7664] ? __pfx_blkdev_ioctl+0x10/0x10 [ 191.161624][ T7664] ? __pfx_blkdev_ioctl+0x10/0x10 [ 191.161653][ T7664] __x64_sys_ioctl+0x18b/0x210 [ 191.161684][ T7664] do_syscall_64+0xcd/0x490 [ 191.161723][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.161748][ T7664] RIP: 0033:0x7fe708d8e929 [ 191.161768][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.161791][ T7664] RSP: 002b:00007fe709cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.161814][ T7664] RAX: ffffffffffffffda RBX: 00007fe708fb5fa0 RCX: 00007fe708d8e929 [ 191.161830][ T7664] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 191.161844][ T7664] RBP: 00007fe708e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 191.161859][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.161872][ T7664] R13: 0000000000000000 R14: 00007fe708fb5fa0 R15: 00007ffd75e35e28 [ 191.161904][ T7664] [ 191.162062][ T7664] ------------[ cut here ]------------ [ 191.422021][ T7664] WARNING: CPU: 1 PID: 7664 at kernel/trace/blktrace.c:1082 blk_register_tracepoints+0x2cc/0x380 [ 191.432639][ T7664] Modules linked in: [ 191.436778][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.2.319 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 191.448786][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.458914][ T7664] RIP: 0010:blk_register_tracepoints+0x2cc/0x380 [ 191.465349][ T7664] Code: 00 00 5b e9 76 17 f8 ff e8 71 17 f8 ff 90 0f 0b 90 e9 76 fd ff ff e8 63 17 f8 ff 90 0f 0b 90 e9 95 fd ff ff e8 55 17 f8 ff 90 <0f> 0b 90 e9 b4 fd ff ff e8 47 17 f8 ff 90 0f 0b 90 e9 d3 fd ff ff [ 191.485192][ T7664] RSP: 0018:ffffc90018667c28 EFLAGS: 00010293 [ 191.491305][ T7664] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff81c37380 [ 191.499379][ T7664] RDX: ffff888030658000 RSI: ffffffff81c375cb RDI: 0000000000000005 [ 191.507454][ T7664] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 191.515502][ T7664] R10: 00000000fffffff4 R11: 0000000000000001 R12: 00000000000000ff [ 191.523512][ T7664] R13: 0000000000002000 R14: ffff8881423b4478 R15: ffffc90018667cf4 [ 191.531576][ T7664] FS: 00007fe709cb96c0(0000) GS:ffff88812485f000(0000) knlGS:0000000000000000 [ 191.540581][ T7664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.547268][ T7664] CR2: 0000200000001240 CR3: 0000000079a68000 CR4: 00000000003526f0 [ 191.555807][ T7664] Call Trace: [ 191.559123][ T7664] [ 191.562090][ T7664] do_blk_trace_setup+0x933/0xb50 [ 191.567686][ T7664] blk_trace_setup+0xed/0x1b0 [ 191.572821][ T7664] ? __pfx_blk_trace_setup+0x10/0x10 [ 191.578642][ T7664] ? __pfx_snprintf+0x10/0x10 [ 191.583394][ T7664] blk_trace_ioctl+0x146/0x280 [ 191.588666][ T7664] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 191.594018][ T7664] ? find_held_lock+0x2b/0x80 [ 191.599205][ T7664] ? hook_file_ioctl_common+0x145/0x410 [ 191.604805][ T7664] blkdev_ioctl+0x108/0x6d0 [ 191.609877][ T7664] ? __pfx_blkdev_ioctl+0x10/0x10 [ 191.615421][ T7664] ? __pfx_blkdev_ioctl+0x10/0x10 [ 191.620496][ T7664] __x64_sys_ioctl+0x18b/0x210 [ 191.625778][ T7664] do_syscall_64+0xcd/0x490 [ 191.630351][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.636759][ T7664] RIP: 0033:0x7fe708d8e929 [ 191.641217][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.661394][ T7664] RSP: 002b:00007fe709cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.668603][ T7650] could not allocate digest TFM handle [ 191.670431][ T7664] RAX: ffffffffffffffda RBX: 00007fe708fb5fa0 RCX: 00007fe708d8e929 [ 191.683855][ T7664] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 191.692370][ T7664] RBP: 00007fe708e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 191.700863][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.709378][ T7664] R13: 0000000000000000 R14: 00007fe708fb5fa0 R15: 00007ffd75e35e28 [ 191.717972][ T7664] [ 191.721045][ T7664] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.728357][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.2.319 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 191.740264][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.750330][ T7664] Call Trace: [ 191.753618][ T7664] [ 191.756561][ T7664] dump_stack_lvl+0x3d/0x1f0 [ 191.761183][ T7664] panic+0x71c/0x800 [ 191.765104][ T7664] ? __pfx_panic+0x10/0x10 [ 191.769566][ T7664] ? show_trace_log_lvl+0x29b/0x3e0 [ 191.774799][ T7664] ? check_panic_on_warn+0x1f/0xb0 [ 191.779940][ T7664] ? blk_register_tracepoints+0x2cc/0x380 [ 191.785692][ T7664] check_panic_on_warn+0xab/0xb0 [ 191.790661][ T7664] __warn+0xf6/0x3c0 [ 191.794583][ T7664] ? blk_register_tracepoints+0x2cc/0x380 [ 191.800337][ T7664] report_bug+0x3c3/0x580 [ 191.804694][ T7664] ? blk_register_tracepoints+0x2cc/0x380 [ 191.810443][ T7664] handle_bug+0x184/0x210 [ 191.814791][ T7664] exc_invalid_op+0x17/0x50 [ 191.819314][ T7664] asm_exc_invalid_op+0x1a/0x20 [ 191.824183][ T7664] RIP: 0010:blk_register_tracepoints+0x2cc/0x380 [ 191.830544][ T7664] Code: 00 00 5b e9 76 17 f8 ff e8 71 17 f8 ff 90 0f 0b 90 e9 76 fd ff ff e8 63 17 f8 ff 90 0f 0b 90 e9 95 fd ff ff e8 55 17 f8 ff 90 <0f> 0b 90 e9 b4 fd ff ff e8 47 17 f8 ff 90 0f 0b 90 e9 d3 fd ff ff [ 191.850168][ T7664] RSP: 0018:ffffc90018667c28 EFLAGS: 00010293 [ 191.856249][ T7664] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff81c37380 [ 191.864230][ T7664] RDX: ffff888030658000 RSI: ffffffff81c375cb RDI: 0000000000000005 [ 191.872212][ T7664] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 191.880193][ T7664] R10: 00000000fffffff4 R11: 0000000000000001 R12: 00000000000000ff [ 191.888172][ T7664] R13: 0000000000002000 R14: ffff8881423b4478 R15: ffffc90018667cf4 [ 191.896160][ T7664] ? blk_register_tracepoints+0x80/0x380 [ 191.901823][ T7664] ? blk_register_tracepoints+0x2cb/0x380 [ 191.907575][ T7664] ? blk_register_tracepoints+0x2cb/0x380 [ 191.913346][ T7664] do_blk_trace_setup+0x933/0xb50 [ 191.918390][ T7664] blk_trace_setup+0xed/0x1b0 [ 191.923086][ T7664] ? __pfx_blk_trace_setup+0x10/0x10 [ 191.928390][ T7664] ? __pfx_snprintf+0x10/0x10 [ 191.933114][ T7664] blk_trace_ioctl+0x146/0x280 [ 191.937898][ T7664] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 191.943204][ T7664] ? find_held_lock+0x2b/0x80 [ 191.947896][ T7664] ? hook_file_ioctl_common+0x145/0x410 [ 191.953461][ T7664] blkdev_ioctl+0x108/0x6d0 [ 191.957982][ T7664] ? __pfx_blkdev_ioctl+0x10/0x10 [ 191.963039][ T7664] ? __pfx_blkdev_ioctl+0x10/0x10 [ 191.968086][ T7664] __x64_sys_ioctl+0x18b/0x210 [ 191.972871][ T7664] do_syscall_64+0xcd/0x490 [ 191.977405][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.983311][ T7664] RIP: 0033:0x7fe708d8e929 [ 191.987756][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.007476][ T7664] RSP: 002b:00007fe709cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.015907][ T7664] RAX: ffffffffffffffda RBX: 00007fe708fb5fa0 RCX: 00007fe708d8e929 [ 192.023890][ T7664] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 192.031872][ T7664] RBP: 00007fe708e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 192.039857][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.047840][ T7664] R13: 0000000000000000 R14: 00007fe708fb5fa0 R15: 00007ffd75e35e28 [ 192.055836][ T7664] [ 192.059161][ T7664] Kernel Offset: disabled [ 192.063507][ T7664] Rebooting in 86400 seconds..