last executing test programs: 20.040550485s ago: executing program 2 (id=53): socket(0x22, 0x2, 0x2) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto(0xffffffffffffffff, 0x0, 0x8002, 0x7ff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() sched_setattr$auto(0x0, 0x0, 0x9) r2 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r2, 0x8000) mmap$auto(0xea, 0x5a4312bf, 0x2, 0x40eb2, 0x401, 0xfff) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b3b, r3) fanotify_mark$auto(r1, 0x101, 0x3, r2, &(0x7f0000000040)='./file0\x00') r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) write$auto(r4, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) msync$auto(0x0, 0x4, 0x4) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) semctl$auto(0x7, 0x6, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x4605, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x12000001, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0), 0x8, 0xa507}, 0x800}, 0x7, 0x4008) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x123a42, 0x0) sendfile$auto(r0, r7, 0x0, 0x3) 18.989853144s ago: executing program 2 (id=57): bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de48302", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x8000000) (async) shmget$auto(0x0, 0x8000000000000000, 0x8007e) read$auto(0xffffffffffffffff, 0x0, 0x1) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x8000000000000d3e, 0x2, 0x948f, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x100000001, 0x5, 0x1, 0x4, 0x3, 0xa199, 0x5, 0x3, 0x8, 0x5, 0x7a0, 0x6d3c, 0x9, 0x6, 0x200000009]}, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) (async) mmap$auto(0x0, 0x400004, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f00000000c0)={0x1, 0x81, 0xec, 0x1, 0x5, "e7227115127a1e8f00"}) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1eb842, 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) (async) write$auto(0x3, 0x0, 0x100082) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) 18.205284345s ago: executing program 2 (id=60): statmount$auto(0x0, &(0x7f0000000a00)={0x5, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x1, 0x2, 0x9, 0x6, 0x400001, 0x4, 0xb4, 0x9, 0x4, 0x400, 0x2000080, 0x7, 0x2d7d01bf, 0x107, 0x2000, 0x7, 0x0, 0x9, 0x6ef, 0xfffffffc, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x4, 0x0, 0x0, 0x10000000000, 0x80000000003, 0x0, 0x80000001, 0x400000000000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x35, 0x2, 0x7, 0x200, 0x0, 0x0, 0x1000], "855d3c38d0c59549365f73b9d195fa7f3a4306c9c02a3e6d660e1cd3090d8b903f22c6ef0e74b56f58f60adaac49ad39e9a1c3beb9a96caa620915f8f1891a8a39263ac727a2d6fab56f9b193f804559d5fc3bf1fa58e0d6e1aae91ff1d7c4add442efdc5b676ffa54a522dea2aaf4b391781e1432c2ef0ba8ed9bb0a9250cab33c371911db3697def44b1b46e1a8bdfb0ec9d7fdfa8781b07e87505d8883a6c03151729667feffb0fe5fc82560a2efca370a3c94636c6fd4344289085e72ef3fd39860b7fef2414dcb099428a"}, 0x1fe, 0x800533) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r0, 0x814}, 0x0) (async) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0) ioctl$auto_FITHAW(r1, 0xc0045878, 0x5) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) unshare$auto(0x40000080) socket(0x27, 0x5, 0x80) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x69a}) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x989002, 0x0) (async) socketpair$auto(0x9, 0x10, 0x5, &(0x7f0000000540)=0x80) (async) socket(0x10, 0x2, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) (async) epoll_create$auto(0x8ca0d1a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socketpair$auto(0x22, 0x8, 0x8000000000000000, 0x0) write$auto(r4, 0x0, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'bond0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25160000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007369743000000000000000000000000005000300020000002c0001800800030059fe0000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000001040080001007c3955943437430eb44aa5ccc627b42eae11b4c4bbbd33179a9df60fd7f5144a70d81f40f11a9feca304549cf40e64e7d1d9c728cec63d39bb5ac537d3c57735590e01f3536daf1bfb2724b43d9aa7da42ab619d08fce507", @ANYRES32=0x0, @ANYBLOB="5800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000a000000080003000000000008000300b0ae00001400020076657468315f766972745f7769666900080003000500000008000100", @ANYRES32=r7, @ANYBLOB="08000300d203000008000100", @ANYRES32=r7, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x240048d1}, 0x48000) (async) keyctl$auto_KEYCTL_PKEY_DECRYPT(0x1a, 0x4, 0x55da, 0x99, 0x2f) utime$auto(0x0, &(0x7f00000003c0)={0xffff, 0xd73}) (async) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.3/tty/ttyS3/power/autosuspend_delay_ms\x00', 0x8a001, 0x0) write$auto(r8, &(0x7f0000000300)='j\xc27\b\\\xa1\xe9v*\xb6]ax\x04\xa9O\xb7\x1f\xae\ri\x1e\xe2\x12\x93\xd5\xe1\x17k`\b\xe6H\xd5\xc3\x05o1\xac,\xe0\xfd\xcc*\xb0g\xa6\x93\xd9\xf64d\xf3\xeb\x0ff\xea^\xf9\xc3\xb8\xc0_\xde\x1dE\xae\x82#\x00\x96\xa6w\xf4\xf1\xdd\xd4\xb1\xcez+c\xe4\x98\x1cLWl\xb6$\x1f\xd1\xec\x1dc\x90t%\xd3\x16E\xe2@8\xcfgT\xcb\xdb\xd3', 0xb) 17.901739893s ago: executing program 2 (id=63): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x7, &(0x7f0000000200)=@link_update={0xa, @new_prog_fd, 0x4007, @old_map_fd=r0}, 0xa3) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040), 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/stat\x00', 0x80402, 0x0) mmap$auto(0x9cf6, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x8000000000000d3e, 0x2, 0x5, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x4, 0x2, 0xfffffffffffffffb]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x100000001, 0x5, 0x1, 0x4, 0x3, 0xa199, 0x5, 0x3, 0x8, 0x5, 0x7a0, 0x6d3c, 0x9, 0x6, 0x200000009]}, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy5/hwsim/ps\x00', 0x9102, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop2\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1eb842, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x100082) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) 16.874137074s ago: executing program 2 (id=69): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa4b81, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x2100000, 0x7fffffff, 0xfffffffffffffffe, 0x1, 0x0, 0x2000000000000e8, 0x4, 0x4, 0x0, 0x8}) r0 = socket(0xa, 0x801, 0x84) (async) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x3}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x10000, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) (async) mmap$auto(0x3, 0x202000c, 0x8, 0x13, 0xffffffffffffffff, 0x661f) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(r1, 0x0, 0x0) (async) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r3, 0x2, r2) (async, rerun: 64) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r4, r3, 0x3) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xb0, r6, 0x1, 0x70bd2c, 0x35dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0x98, 0x1, 0x0, 0x1, [@nested={0x92, 0x3, 0x0, 0x1, [@generic="ccc7dab4643d425bc745e7d6561613364a934b430676c3b5d499c1438eb115a4a0dbf0e326100d993a6f6bafcb966df5f05da98385eaf947b19e5c53d33f17e5a5e32e3db4d19efce537493d46bd1e2b63b07004898be17dd9df48e4124936bf856b08ffe7bc7d1eac3c65fd2ce61093c4f201f0286acc13d4e5cf51e4f23845a163e3a5924319fd572598c2416b"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0x4068aea3, &(0x7f0000000080)={0xc0}) (async) close_range$auto(0x2, 0x8, 0x0) (async) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x9c) 16.556150766s ago: executing program 2 (id=71): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x341102, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x171900, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x200, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto(r7, 0x0, 0x2, 0x0, 0x5) pread64$auto(r6, 0x0, 0x40000000f42c, 0x2) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen\x00', 0x14200, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000100)={0x8000, 0x2, [{r3, 0x0, 0x224, 0x2}, {r0, 0x0, 0x37}, {r1, 0x0, 0x5, 0x3ff}, {r2, 0x0, 0x6, 0xb3}, {r2, 0x0, 0x2, 0x1}, {r8, 0x0, 0xdb4c, 0xa}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) 4.441519395s ago: executing program 1 (id=118): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = socket(0x2, 0x3, 0x6) (async, rerun: 32) r3 = socket(0x2, 0x1, 0x0) (rerun: 32) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x9) (async) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000740)="3379cb1a0c78469f51c19183f7f2d5d5701cab05019ce42d94fedb208db21e9d35d41fa3174fc835d686068e27bc08b001ca2732a1f6d0cafbd5cd09f9926592709fcf51b37626adf86e033c1e27f4d522c050b7f01c97ac50222da7793b0ee324d2d8c90062d6d1596bf3bb637f67a48960e67f27be6e589ab7f4f2f0c586a79295fe9d20a87b0896b7b7e245e3772b007757cf3fc1d2f01445dc72af6e3e3a58ff91233fd9513d17b5c17cf4ada9f0752b59cd1c3874ff470f6dc0c3d6b245ab7045b8dcfd6a02ede718983264fd162dd1bfed061e5ec05d9e6a86e3b2123d618aff79a187aa70fc4e32755ea652643f30180ac71e", 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800808}, 0x5, 0x20000000) r4 = socketpair$auto(0x1, 0x4, 0x4, 0x0) (async) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) setsockopt$auto(r1, 0xb, 0x9, 0x0, 0x9) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r5) sendmsg$auto_NL80211_CMD_TDLS_OPER(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES16=r6, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) mmap$auto(0x0, 0x1, 0xe1, 0x100000000009b7c, r5, 0x5) (async) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) (async) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async, rerun: 32) r7 = getpid() (rerun: 32) r8 = gettid() rt_tgsigqueueinfo$auto(r7, r8, 0x1f, &(0x7f0000000400)={@_si_pad}) (async) write$auto(0x3, 0x0, 0x1) (async, rerun: 64) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async, rerun: 64) r9 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/version\x00', 0x101000, 0x0) preadv$auto(r9, &(0x7f0000009180)={0x0, 0x9}, 0x8, 0x101, 0x5) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=r5, @ANYBLOB="01002bbd7000fc62df2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) 4.280921267s ago: executing program 0 (id=119): mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd.', 0xd, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r1) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r2, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VERSION={0x6, 0x1, '+@'}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x800) 4.124676742s ago: executing program 0 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf25030000002c00000028000180240006801d0074804cfe4d808847d00003080000040003002a9d272f660400338000000004000380040002"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x9000643c, 0xc35) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') (rerun: 32) r4 = ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) (async) r5 = socket(0x2a, 0x2, 0x9) sendto$auto(r3, 0x0, 0x402, 0x3, &(0x7f0000000700)=@generic={0x2a, "e2e1000000000000000400f100"}, 0x9) (async) mmap$auto(0x0, 0x400008, 0x2, 0x400000000009b72, 0x2, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) pwrite64$auto(0xc8, 0x0, 0x11, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) clock_settime$auto(0x14, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r5) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x2cc, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2b8, 0x2, 0x0, 0x1, [@nested={0xa6, 0x4f, 0x0, 0x1, [@typed={0xc, 0x57, 0x0, 0x0, @u64=0x5}, @generic="c6a8022d68d74ad0447e7b76dff00a37b53e9b04446f846b32e11ff67c72e28e99d560e659f3b4cf2150bf9b6cbc050d4d37d070801b79f762c99675ed4ba60a8cf59d810a2fe74f62f3f0bfdd3b006a399e4b0ff6328c6d9eb022e3b5a82582d844decb9ff0996c0ac220edac1fcf571f52ff3f0ec6bfd831e36f1d4d00", @nested={0x4, 0x143}, @nested={0x4, 0x6e}, @generic, @typed={0xf, 0x2b, 0x0, 0x0, @str='ovs_packet\x00'}]}, @nested={0x20, 0x97, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}, @typed={0x14, 0x231, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@remote}, @nested={0x1cd, 0xd, 0x0, 0x1, [@generic="9772c993d672f2b99d61c02b9b30a0d0901e5042a967de4274db9c40868d284b826bb55e834cac9e85efd74757ee12b73bc8440ccbc01159c2d3678a2ee5e5daa3fe113d5e6955e207f71e312a7e965cc417d442dea9a6a27dcd61c2d45dae3065b0e049f9d65e12202f9a688bdb318162d53b20ab4c62a511526059804912b936c23e6e3c4b02b4b9f408cdbd62d9db10f59bc23248acf13b655104fad3e855a4f09649e3a6d1c4667d491842aec3042a1a98f6806835191b7dc158890f785af24d5694d9cbcdbe5cf75251b5c15197b8f7a04e62b5886b9dba3249a91795e66ab4fa590d2575fcf7", @nested={0xd7, 0x10, 0x0, 0x1, [@nested={0x4, 0xde}, @generic="42e24d00b73b9462a65af1ad09d4929a9f316b2142373819d7a01ba567560f2b2395b12dd2102493d118b2691bc121e3510f52371cceef458a43035dfc5fee0b39c52744b77423584855d6d4f071cf407f1c6c45b9b7d5f7b6fc6d2ae9d0fb1026ca746b174552a0b0176bfadf8675447b803a924269d4411d47875a3251d362144ae66a2494898170", @generic="32291f22a86d0a914ccc9d95980b28cded778f64225eacd1bb", @generic="706b2540e018fafbc09fc38a481c2f8e5e434ead317b81068b56d17993fdfc09c30d1e7f003a047c8a4463cb8a"]}, @typed={0x8, 0xa0, 0x0, 0x0, @fd=r4}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x1000}, 0x25) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) (async, rerun: 64) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xf4, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcc, 0xbe, "654b6a1343432fd0cf5d78e8e0e3be88e498d4558e5fff57199623522c0dfb79ef4b52d03152ae8b20efe136a4934562f12aa2ffcce631c858ab8875359a116e1a186edf0af8c4e667f10b9e933ff4d627306006d65f7453c4bcc7c38abf29b28e64a60107537339725cef45c8d47146c8da44b975229c684bc9f7e91e7f2f9450bc2636a2331ea4505c634357303837fc43ebc68f66804485cea06aea4e8c14119b7ee2bab0b714aa73f60e7028ca50a8b1be17c2ecc30e797fed4152c3c3108f7399f4ae96f6ca"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}]}, 0xf4}}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r8, 0x1, 0x4c, 0x0, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x608000, 0x4) ioctl$auto_TCFLSH2(r7, 0x5453, 0x0) 3.752445133s ago: executing program 1 (id=122): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/id\x00', 0x103000, 0x0) readv$auto(r0, &(0x7f0000000700)={&(0x7f0000000640), 0x7f}, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) (async) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x2a52) r2 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x2, 0x3, 0x2) (async) socket(0x2, 0x801, 0x106) (async) socket(0xa, 0x2, 0x0) (async) r4 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0xff, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, r3, 0x0, 0xffffffff, r4, @relative_id=0x3, 0x4}, 0xa3) (async) bpf$auto(0x2, 0x0, 0x9) (async) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, r2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000000640)={0x0, 0x17, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x401}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_KEY(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x86}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008011}, 0x800) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x440003, 0x0) (async) mprotect$auto(0x0, 0x806121, 0x8) (async) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000000c0)={0x5, 0xf, 0x7fff, 0x40, 0x85, r8}) kcmp$auto_KCMP_SYSVSEM(r9, r8, 0x6, 0x0, 0x5) readahead$auto(0xffffffffffffffff, 0x0, 0x6) 3.556887352s ago: executing program 1 (id=123): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xf, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x2f79f1d9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x40, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000680)=""/249, 0xf9) r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) write$auto_dfs_global_fops_debug(r0, &(0x7f0000000d80), 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x6, 0x6, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) (async) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c6, r1) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) (async) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0xe, 0x100000000007) 3.458169021s ago: executing program 0 (id=124): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/queues/tx-2/xps_cpus\x00', 0x20000, 0x0) read$auto_proc_single_file_operations_base(0xffffffffffffffff, &(0x7f0000000000)=""/122, 0x7a) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/17, 0x11) 3.076580313s ago: executing program 0 (id=125): r0 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x800000000003, 0x379e, 0x3fffffff, 0xffff, r0, 0x8000000000008000) r1 = socket(0x11, 0x80003, 0x300) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r2, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) (async) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) (async, rerun: 64) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) (rerun: 64) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22e240, 0xd5) r5 = fcntl$auto(r4, 0x400, 0x1) ioctl$auto_OTPLOCK(r4, 0x800c4d10, &(0x7f0000000040)={0x2d, 0x8, 0xfffffffd}) (async) mmap$auto(0x7e1bc82a, 0xb420, 0x4, 0x7fff, r2, 0x2f7a) (async) ioctl$auto_X86_IOC_WRMSR_REGS(r5, 0xc02063a1, &(0x7f0000000100)=[0x81, 0x2, 0x94a0000, 0x3, 0xfff, 0x80000001, 0x10000, 0x4]) 3.061956279s ago: executing program 1 (id=126): socket(0x2, 0x800, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r0, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x5, 0x6, 0x80000001, 0x14, r0, 0x9) (async) mmap$auto(0x5, 0x6, 0x80000001, 0x14, r0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r1) (async) r2 = fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) (async) socket(0xa, 0x1, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r3, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x1) (async) landlock_restrict_self$auto(r3, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto_SO_SELECT_ERR_QUEUE(r2, 0x1, 0x2d, &(0x7f0000000000)='/dev/ecryptfs\x00', &(0x7f0000000040)=0x1) recvmmsg$auto(0x3, 0x0, 0x10001, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xc, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xc, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x2, 0x3a) mmap$auto(0xfffffffffffffffc, 0x20009, 0xdf, 0xeb1, 0x401, 0x20000b463) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1181, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) 2.840536981s ago: executing program 0 (id=127): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) eventfd$auto(0x34b) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x65f, 0x2, 0x1, 0x948b, 0x3, 0x4, 0x39, 0x6, 0x62, 0x8000001d, 0x8, 0x4, 0x6, 0x8, 0x200000000000004]}, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x10007) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x6) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/mtd/mtd0ro/power/runtime_suspended_time\x00', 0x20000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$auto(r3, &(0x7f00000001c0)='y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000180), r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4000011) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x389803, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x5f) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttys0\x00', 0x26a00, 0x0) ioctl$auto_TIOCMBIS(r4, 0x5416, &(0x7f0000000040)="1e66cfea880288ddc30115c3e01d1aff43b6768c2e86242394c3d7f3cf5a8996deaf1c8cf1cb09e2fb7f001651c62c2b820be9720e64b82be79af1c74ed80c8e43e561c1504568ddfaa46191ffc8508ddc0327b6378f2a7a2d") close_range$auto(0x2, 0x8, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x2, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) eventfd$auto(0x5d5d) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x3, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["0000000000000000000000f9", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) 1.977965699s ago: executing program 1 (id=129): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = socket(0x23, 0x2, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(r1, 0x89ef, 0x74) ioctl$auto_SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)="351547") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r4, 0x4143, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r2, r5, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.weight_device\x00', 0xca401, 0x0) write$auto(r6, 0x0, 0x81) unshare$auto(0x40000085) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.809275935s ago: executing program 3 (id=130): setresuid$auto(0xd, 0x5, 0x81fe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) setreuid$auto(0x0, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04002f8008006b00", @ANYRES32, @ANYBLOB="5858606dc35d196156edd240403c455df677373ead5b474ddfcb767be4e648386d56a4f976a9ca7bccbbb4f3b0c5d390c2b5c5f2a960df9aebfd29b24329e7adc3de6c4d4699fe1132efc0e8dc1a2a208b4c5727efd0d94a1b700789d32742dbe6edad1617e263534609b0513cd9c41f40441337fb979636167b193ddaaef6ef432f93c3af7ff511ff674bfc7fdf56a9ea6dea4dd4129f335797d89aad464ea6c71bbb736b0bd2f9ce1f42ab49684f28de77ff9087e32c6c22eab57b71a034b7184a41602f44fc2f8bb5ac187af395d3301fceee4701aaec02422654e180000008003900", @ANYRES32, @ANYBLOB="0c008b00000000004575000008000b00f1000000"], 0x278}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r3 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/usb/usbmon/13s\x00', 0x40040, 0x0) r4 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) close_range$auto(r3, r4, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(r4, 0x1ff, 0x0) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r5, 0x800, 0x7f, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x40}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x6a62}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4008000) shmctl$auto_IPC_STAT(0x2, 0x2, &(0x7f0000000040)={{0x4, 0xee01, 0xffffffffffffffff, 0x700000, 0x2, 0x8, 0x494b}, 0xfff, 0x140000000, 0x8, 0x2, @raw=0xa83, @raw=0x2, 0x5, 0x0, &(0x7f0000000440)="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", &(0x7f0000000100)="f14f408b05ec851cf36339d0851207d0d4e65834871a4658b7d061c7fb2d06df4d08256b5eb63313836525589623b71c3fd5e95166ef084f474413e4f25cdce72e334a0db979a337b923fbd39ece28b1a7d9ff7d8c4cbc9fd02f001a4ee8f88e99f09fb687a19dcf70dc8233f4457008da2c29aa9cb4889818bf68e9d63d3ff7d002e738de97b096d8bf0fa147463a0f7299e25b8ac2dff26814e382c839aa4bed178673348d74c10001a4bb6d7f931e2eae2c504084d83779040e21b14caface4d7e5a60f7278b512014a27ed123bf88b"}) ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f0000000240)={0x7fff, 0xaa3, 0x3, 0x5, 0x5, 0x0}) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000016c0)={0x59c, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa79}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x200}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_LLC_SDP={0x544, 0x13, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x17, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x58, 0x0, 0x0, @pid=r7}, @nested={0x49c, 0x81, 0x0, 0x1, [@generic="67d9d8d7275ad7033ce9a079138f3cf87cc490b2bae84deefa63ea2534bc64", @generic="ac1bd07058189650bc3609d24470067550d0260e4db1b43ae292f04235e4428014a2d7bdd610c71847259c991526c249593e7c3c51", @generic="3c885ffbd89e60bb58c227e7b9ac8ae6b87511cf97b58801c071a23d205771dbf3f7a4d251941a0098b30fb7c9f2fa845c9356f5ab27b9372f9d61eb2641ec1d1993b20dd1c420f18455b42e9424d8ebf5d1f51417d5dc26b3ececbad510927410a0", @generic="1d7c6ea3f1bc9c893cacc076d9e176019daf8f522504ee6c2d221d4d657a16dd18632e585bcabc69b6daf4c2823b83ac238355e25f29a20aa4ad854af02ce6518fbcedea6f69c1d31a5e22078f47aee65bdad2d69b53b0498eebfef4e34a64d3fab858d47a2b76d819762b811a9c8c916fde404cc449fbd15ec485a78e275812cf75f2fa6dc38a481d37c642b366d79b6a6c5dc76c5aa71e9e0cf51e2773a5bf8185787d6cc1e162a948ee1958c7", @nested={0x331, 0x8a, 0x0, 0x1, [@nested={0x14, 0x94, 0x0, 0x1, [@nested={0x4, 0x14c}, @nested={0x4, 0x151}, @typed={0x8, 0x8b, 0x0, 0x0, @str='\b@#\x00'}]}, @generic="1c477c9736b996a20427202064b38b3cbc39ad855074e57986e5033b514bd053f364ee170b40f15e4c23c47a906179c1b87220b6ab01da65ff4d487f46b335637865ed621fdc3dbbbe68f4a2765ef89a837ee94579e6e1ba52473b7fa6a261825e2ae882dd444ac62cfbb8544c8c1de8eadc1a6fe27bb94bcd26a21cf7430a9e85c15bda0a7cabfbce490705f55f6bc7fceacdb54eee522a49d922f00f6a89095e1e054e613416ebc48e7dc50e0fc28827c52dd1d51ae0889e10bf97597c90b9968aaa56931b9057ad2d2846888d4cafdaa79bd2d3ad76b48fe9c0481696e9442584b72b13142d96564e96aeb3", @typed={0xa5, 0xe6, 0x0, 0x0, @binary="633c14f85c741bb07cbe44c4f3d028745a329e083827d6cb8221017281e8fa60a00efec5bf0728532f81d6de1d87f56b113fbfdaf97c55f06ed2c4330f7ec879759d0507055d0d4ca6084dd3cf108001e8a36da77eb2d4d5a341afe14f3799f9ab2f54e7efb8a24b9a927fcd9db9502fa6661bbd935856c374dc5b3590c12cd9a498ab07bc3bb74ee3e2e851ecace58fdf52604f3dbea8ae9fc7c7efb4c2100c7f"}, @nested={0x183, 0x114, 0x0, 0x1, [@generic="86c555360bb4b1d0ad04d4648da6a86bc387676c1b920815849e06e7", @generic="1cfa9afe99eab53c7eec74fd0d66cea6c42d70a8d82ec43013068a590da0a8c5d4544432d273e1e1f30eb6bab7f801d29417e9f8bc3b9ee2f4ea6b0cc3858315a6056894e7708009e34e662c5c800a08fc60c96902fb146a3a24e1ae1694d233548e7902", @nested={0x4, 0x7a}, @nested={0x4, 0x137}, @nested={0x4, 0x10a}, @typed={0x6, 0x2d, 0x0, 0x0, @str='#\x00'}, @generic="bd471808ce3cfdd24f754ba344de07d440041e119fcab68b6a560ede28a9b6d9cb7340d1b28a26c85c26981eb5780756039efcee864b8e2c9ae095f1f30b2704b52a0f9000cbcae8bf3c4bce25345150c4aab7e68cd6d80c90b6b25612520b2fbde76aeaf232ef821fc1671e25fe6f7a2057fad01e67c8c1a1b6e2f8461c713658e8714a51bffbbaafdd23239bdb027526c3ee9718fe9e1d55c2834c6afc6dd4bf065a35e880dc7876814aaea57c113039945b9df52fa378537ecafd999de4f1d6b2142599530df6914983a2b7eaff884ae86780a9081e63c3dca54a05671b49cf620a0d0bef18c01f6460"]}]}]}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x80000000}, @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="9561ae5ad4ff0e3e6e5a35328e216ede367b61d47a1d6d74967efb162beca2f7fc4fb474d749c4abc97657d8af20135afd0aa83e4e9559d17f0c04e66ac2c6f9fd74d23c031326", @generic="9aa1b06b9429422d58e70690d4cfca8b6827a46e6713685332f5cd97722bec3291c0c0427bca066e", @generic="8f717ba78c15430774"]}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x20}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x9}, @NFC_ATTR_DEVICE_NAME={0x6, 0x2, '^\''}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xa}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x59c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008081) socket(0x1a, 0x80003, 0x0) 1.6003058s ago: executing program 3 (id=131): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x4, 0x3, 0x4, 0x9b72, r0, 0x200000000000) timer_create$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="5cb92559262c2b403fe627c16169dcf5fd07d0a0e6aef8169fd24168742f6291b1a635d9e2db24c9d1741524ab11a0de18e41afe166257dedc28a9ab2886205b615ca19000ae0d765371370a64dce86d6e8438fa1956032589be284518f5cc5051c83383eef72d87562c64b62d32c4b4568bef18941ad1981548e8051c4fbc45ce5860f499b08e913bf0843a3676f79fcf38f4972573b920f28c832f984901cf44dece5376069a59e851b8d7cbc3d2a094d1877921c48e82064c498ef11d3b0378dce5fece8f", @ANYBLOB="01002bbd7000f9dbdf25010000000200000000000000e4bab2880800000008000a000800000004001f000000000000000000000000000000000000000000000100000000ffff6401010100000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x54b362, 0x0) write$auto(r2, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) r3 = socket(0x2, 0x1, 0x106) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000200)="3b071827141a8b5c0074b24497f0fde8957fa237430b15d408520461d4752bffb90e1628e39dec5ec54a5348df7b83fdc3abb952947c1e8bab9efec1476d6a08d8d9b43e72641e") r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r5) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) read$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x1e, 0x80, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) 1.144705071s ago: executing program 32 (id=71): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x341102, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x171900, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x200, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto(r7, 0x0, 0x2, 0x0, 0x5) pread64$auto(r6, 0x0, 0x40000000f42c, 0x2) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen\x00', 0x14200, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000100)={0x8000, 0x2, [{r3, 0x0, 0x224, 0x2}, {r0, 0x0, 0x37}, {r1, 0x0, 0x5, 0x3ff}, {r2, 0x0, 0x6, 0xb3}, {r2, 0x0, 0x2, 0x1}, {r8, 0x0, 0xdb4c, 0xa}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) 1.116290635s ago: executing program 3 (id=133): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/urbnum\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto_SO_SNDTIMEO_OLD(r2, 0x7bbb, 0x15, 0x0, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x1ff, 0x30, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x3) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(r0, 0x89ef, 0x74) 984.28607ms ago: executing program 1 (id=134): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x84, 0x4, 0x0, 0x28) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1234c0, 0x0) socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) (async) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40f00, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000001c0)=0x2) (async) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000001c0)=0x2) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) (async) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x40, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x24000040) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) (async) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 804.813835ms ago: executing program 3 (id=135): socket(0x9, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r3, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x57}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x28}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto(r0, 0x4b72, r1) 636.587238ms ago: executing program 0 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xa69b, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getgroups$auto(0xeda, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000180)={0x45, 0x3, 0x1, @raw=0xaa}}) madvise$auto(0x400110c230000, 0x1, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900), 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x200400, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x917d, 0x8, 0x3, 0x4000003, 0x0}) connect$auto(r1, &(0x7f0000000380)=@l2={0x1f, 0x8, @none, 0xb, 0x2}, 0x2) getrandom$auto(0x0, 0x3, 0x80000001) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3102, 0x0) madvise$auto(0x1000, 0x9, 0x3) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000003c0)="47c4322fa14637684cac6018ddb7a4b3503261c30a66b82a7e40e94deef154c9a7c3dbf0c5535702ba8a5b93ae785aace243611c7be2a22a4cd76f5208e7b100d582e021be97bb47ed6019f62e714b60bdf1111948ab9990a5d43eb4f43d46ec9d59d8805f269084f6ae4ea4f77a74705c06a39a4e8eba0ff6e14e7e427462e86c1d3abba2ce659f9e74a9006b37d4385f4c040f1d2babcd38932d36c0a7fda3b35bcc8e5668b5d34c47534772faa79f4d36a9c58932249b46e0a4f314e26fe07efc397486ee97ed9a6e13bb3f062ae1e4", 0x3) sendfile$auto(r4, r2, 0x0, 0x2) remap_file_pages$auto(0x6a27, 0x1003, 0x0, 0xb74, 0x66a) madvise$auto(0x10001, 0xffffffffffff0001, 0x20015) keyctl$auto(0x9, 0x1, 0x1, 0x4, 0x6) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) msync$auto(0x110c230000, 0x200001, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 528.366247ms ago: executing program 3 (id=137): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x404800, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1b5d", 0xfff}, 0x3) ioctl$auto(r0, 0x4008af03, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r3 = socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000480)={r1, &(0x7f00000001c0)="44b1fab18df1a6cffcbbe2c29de7fcef1f3565209f614fd3a972621292bae66d13123f3c250e1db940c90f178bba753f09077fd019769123dc2e2d67d7367368a06a186ff231b4dac30125aad3833d45d74441c08d25763ba3d0cce77a85a9facc79e364ddcefe2fe64e24fd8e1f037c7692a7d960a6aebd2b4b668a1fccf275bb4e4c503ffd4004a028c5cabbf6224fb7a2714faefc91236076ba7d9f0bc584feab338b9426510a792f3358e8", 0x0, &(0x7f0000000280)="c2ca0feca7ffc679e0852b08805c15fc3ac42ec4b74900e62a6792e7ace088b99a7018e092a51dcf02bc519ee3e12eaf600f00a0f78565d9ca722f49a64776aa7289a6f0aaa566573d2bdce61eb4d6d8260800eb4e2eb35207bf1505488495ffb1bfcb1295b038ab2e5f910ac936f8200a89d9cc9ea46ed62dee66bef6b2850626e7c148e05c096a3f5781b3cf9cd2527e52eedca75fe2e57539cfd6513c7bc56594ee5e03d80cf752bdfd46b402049c0d322e6ffc9e147c821516f009ae9bfda2454e0ff15ee462b6859a08431eba52b61a1d841b5d2ab92044e8c3f143b93da2a18f5e2fd5fcbc4cc41280af8c444519", 0x80000000, &(0x7f0000000380)="7c6af4c0e608ae5316da39c37c06a77d7677ba01a2ca3854dc234546c83fa636d05309494146b623d0f7bbfd2aaca278578b3b52bb72dd1b358cdfece3ecba9f1725d6069b9774c230be0e636226aa074a0e11d611a01620096af853d37a00609446fed0072331f89061318e5d95f6a593675646c0dd32bd2b0c6f28491fe569e9bb296010ffe6e7659a0444c7e851599ee17814582a3496fd1e9e7e416f2ff1", &(0x7f0000000440)=0x7f}) ioctl$auto_FS_IOC_SETFSLABEL3(r4, 0x41009432, &(0x7f00000000c0)="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") keyctl$auto(0x10, 0x0, 0x9, 0x5, 0x80000003) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 0s ago: executing program 3 (id=138): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r2 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xfffffffffffffffe, 0x9}, 0x80009}, 0x3, 0xfffffffc) mmap$auto(0x0, 0x4020009, 0x6, 0x15, 0x401, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/2/effective_affinity_list\x00', 0x42, 0x0) pread64$auto(r4, 0x0, 0xf42f, 0x7f) ioctl$auto(r3, 0x560a, 0x7) writev$auto(r4, 0x0, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r6, 0xffffffffffdffe00, &(0x7f0000000140)=';') lseek$auto(0x3, 0x20000, 0x1) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 79.723123][ T5817] cgroup: Unknown subsys name 'net' [ 79.855606][ T5817] cgroup: Unknown subsys name 'cpuset' [ 79.864056][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.263900][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.881118][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.890527][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.898637][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.907211][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.909086][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.914490][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.928707][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.936646][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.937712][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.944058][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.954189][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.960135][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.965525][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.972363][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.979600][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.993441][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.993558][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.000982][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.016044][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.023877][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.491288][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 83.572712][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 83.635243][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 83.647000][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 83.759397][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.767060][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.774763][ T5830] bridge_slave_0: entered allmulticast mode [ 83.781703][ T5830] bridge_slave_0: entered promiscuous mode [ 83.819565][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.826881][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.834079][ T5830] bridge_slave_1: entered allmulticast mode [ 83.841230][ T5830] bridge_slave_1: entered promiscuous mode [ 83.946504][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.955735][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.963729][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.970823][ T5828] bridge_slave_0: entered allmulticast mode [ 83.977942][ T5828] bridge_slave_0: entered promiscuous mode [ 83.985234][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.992353][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.999530][ T5829] bridge_slave_0: entered allmulticast mode [ 84.006652][ T5829] bridge_slave_0: entered promiscuous mode [ 84.013727][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.020846][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.029547][ T5831] bridge_slave_0: entered allmulticast mode [ 84.036595][ T5831] bridge_slave_0: entered promiscuous mode [ 84.045903][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.055326][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.063342][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.070449][ T5828] bridge_slave_1: entered allmulticast mode [ 84.077564][ T5828] bridge_slave_1: entered promiscuous mode [ 84.084436][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.091556][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.098943][ T5829] bridge_slave_1: entered allmulticast mode [ 84.105986][ T5829] bridge_slave_1: entered promiscuous mode [ 84.113379][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.120491][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.127693][ T5831] bridge_slave_1: entered allmulticast mode [ 84.134592][ T5831] bridge_slave_1: entered promiscuous mode [ 84.217647][ T5830] team0: Port device team_slave_0 added [ 84.225939][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.237430][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.249003][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.259888][ T5830] team0: Port device team_slave_1 added [ 84.267327][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.278262][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.289145][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.375308][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.382267][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.408495][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.421854][ T5828] team0: Port device team_slave_0 added [ 84.429364][ T5829] team0: Port device team_slave_0 added [ 84.437166][ T5831] team0: Port device team_slave_0 added [ 84.443519][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.450465][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.476556][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.489056][ T5828] team0: Port device team_slave_1 added [ 84.503457][ T5829] team0: Port device team_slave_1 added [ 84.510528][ T5831] team0: Port device team_slave_1 added [ 84.561413][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.568382][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.595054][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.627014][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.634002][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.660265][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.672054][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.679439][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.709284][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.721011][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.728249][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.754439][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.775872][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.782873][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.808846][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.827038][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.834242][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.860268][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.899339][ T5830] hsr_slave_0: entered promiscuous mode [ 84.906625][ T5830] hsr_slave_1: entered promiscuous mode [ 84.993223][ T5837] Bluetooth: hci2: command tx timeout [ 85.002591][ T5831] hsr_slave_0: entered promiscuous mode [ 85.008743][ T5831] hsr_slave_1: entered promiscuous mode [ 85.015104][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 85.020865][ T5831] Cannot create hsr debugfs directory [ 85.041758][ T5829] hsr_slave_0: entered promiscuous mode [ 85.047979][ T5829] hsr_slave_1: entered promiscuous mode [ 85.054317][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 85.060037][ T5829] Cannot create hsr debugfs directory [ 85.071539][ T5828] hsr_slave_0: entered promiscuous mode [ 85.077175][ T5837] Bluetooth: hci3: command tx timeout [ 85.077388][ T5837] Bluetooth: hci0: command tx timeout [ 85.082513][ T5837] Bluetooth: hci1: command tx timeout [ 85.083954][ T5828] hsr_slave_1: entered promiscuous mode [ 85.099601][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 85.105603][ T5828] Cannot create hsr debugfs directory [ 85.524572][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.536943][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.556328][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.569453][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.626709][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.640698][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.653362][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.666041][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.768697][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.780206][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.790925][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.801715][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.908117][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.918475][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.928195][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.938421][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.999199][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.016164][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.064152][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.089412][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.107613][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.114847][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.126215][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.133317][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.154927][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.162084][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.177700][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.184826][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.284168][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.314227][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.349402][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.379365][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.386549][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.414713][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.434348][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.441494][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.490970][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.498140][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.526904][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.534072][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.636997][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.781809][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.867546][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.954184][ T5828] veth0_vlan: entered promiscuous mode [ 87.029546][ T5828] veth1_vlan: entered promiscuous mode [ 87.073060][ T5837] Bluetooth: hci2: command tx timeout [ 87.112617][ T5830] veth0_vlan: entered promiscuous mode [ 87.152821][ T5844] Bluetooth: hci3: command tx timeout [ 87.158357][ T5840] Bluetooth: hci0: command tx timeout [ 87.164201][ T5837] Bluetooth: hci1: command tx timeout [ 87.166730][ T5830] veth1_vlan: entered promiscuous mode [ 87.195280][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.206747][ T5828] veth0_macvtap: entered promiscuous mode [ 87.243991][ T5828] veth1_macvtap: entered promiscuous mode [ 87.318965][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.357662][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.388537][ T5831] veth0_vlan: entered promiscuous mode [ 87.401293][ T5830] veth0_macvtap: entered promiscuous mode [ 87.417298][ T137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.427552][ T137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.437405][ T137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.452204][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.461398][ T5830] veth1_macvtap: entered promiscuous mode [ 87.468239][ T137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.478793][ T5831] veth1_vlan: entered promiscuous mode [ 87.522327][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.565317][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.608829][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.617690][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.635048][ T1008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.644294][ T1008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.666676][ T1008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.676804][ T1008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.692219][ T5831] veth0_macvtap: entered promiscuous mode [ 87.721390][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.730113][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.734027][ T5831] veth1_macvtap: entered promiscuous mode [ 87.746693][ T5829] veth0_vlan: entered promiscuous mode [ 87.799290][ T5829] veth1_vlan: entered promiscuous mode [ 87.824207][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.850820][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.867270][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.879389][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.885521][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.895103][ T5829] veth0_macvtap: entered promiscuous mode [ 87.937231][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.953188][ T3577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.961941][ T3577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.986433][ T5829] veth1_macvtap: entered promiscuous mode [ 88.003664][ T3577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.012397][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.012979][ T5923] kafs: addr_prefs: Invalid Command [ 88.030172][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.119051][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.174132][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.253988][ T2986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.265656][ T2986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281316][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.291194][ T5929] Zero length message leads to an empty skb [ 88.297288][ T2986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.307582][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.326252][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.353779][ T2986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.517262][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.525575][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.553536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.883900][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.891744][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.045303][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.063893][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.156753][ T5837] Bluetooth: hci2: command tx timeout [ 89.233605][ T5844] Bluetooth: hci3: command tx timeout [ 89.239090][ T5837] Bluetooth: hci1: command tx timeout [ 89.245115][ T5840] Bluetooth: hci0: command tx timeout [ 89.844207][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.894498][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 90.092846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.532909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.533064][ T5990] QAT: Stopping all acceleration devices. [ 90.541459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.661311][ T5837] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 90.661348][ T5837] Bluetooth: hci3: unexpected subevent 0x0a length: 725 > 30 [ 91.133091][ T6004] FAULT_INJECTION: forcing a failure. [ 91.133091][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 91.175625][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 91.175645][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.175658][ T6004] Call Trace: [ 91.175664][ T6004] [ 91.175670][ T6004] dump_stack_lvl+0x16c/0x1f0 [ 91.175697][ T6004] should_fail_ex+0x512/0x640 [ 91.175713][ T6004] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 91.175735][ T6004] should_failslab+0xc2/0x120 [ 91.175777][ T6004] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 91.175807][ T6004] ? dquot_alloc_inode+0x51b/0xb90 [ 91.175834][ T6004] ? __dquot_initialize+0x299/0xd50 [ 91.175849][ T6004] ? __d_alloc+0x35/0xa80 [ 91.175874][ T6004] ? __d_alloc+0x35/0xa80 [ 91.175893][ T6004] __d_alloc+0x35/0xa80 [ 91.175916][ T6004] d_alloc_pseudo+0x1c/0xc0 [ 91.175932][ T6004] alloc_file_pseudo+0xcf/0x230 [ 91.175949][ T6004] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 91.175970][ T6004] __shmem_file_setup+0x1a8/0x350 [ 91.175994][ T6004] shmem_zero_setup+0x93/0x1b0 [ 91.176012][ T6004] __mmap_region+0x2271/0x2a00 [ 91.176030][ T6004] ? __lock_acquire+0x436/0x2890 [ 91.176043][ T6004] ? __pfx___mmap_region+0x10/0x10 [ 91.176065][ T6004] ? lock_acquire+0x179/0x330 [ 91.176085][ T6004] ? finish_task_switch.isra.0+0x207/0xbd0 [ 91.176140][ T6004] ? rcu_is_watching+0x12/0xc0 [ 91.176164][ T6004] mmap_region+0x1ab/0x3f0 [ 91.176180][ T6004] ? __get_unmapped_area+0x267/0x3f0 [ 91.176210][ T6004] do_mmap+0xa3e/0x1210 [ 91.176233][ T6004] ? __pfx_do_mmap+0x10/0x10 [ 91.176252][ T6004] ? __pfx_down_write_killable+0x10/0x10 [ 91.176271][ T6004] vm_mmap_pgoff+0x29e/0x470 [ 91.176293][ T6004] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 91.176316][ T6004] ? __x64_sys_futex+0x1e0/0x4c0 [ 91.176332][ T6004] ? __x64_sys_futex+0x1e9/0x4c0 [ 91.176350][ T6004] ksys_mmap_pgoff+0x7d/0x5c0 [ 91.176368][ T6004] ? xfd_validate_state+0x61/0x180 [ 91.176381][ T6004] ? __pfx_ksys_write+0x10/0x10 [ 91.176403][ T6004] __x64_sys_mmap+0x125/0x190 [ 91.176419][ T6004] do_syscall_64+0xcd/0xf80 [ 91.176444][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.176460][ T6004] RIP: 0033:0x7fedd978f7c9 [ 91.176475][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.176492][ T6004] RSP: 002b:00007fedda658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 91.176506][ T6004] RAX: ffffffffffffffda RBX: 00007fedd99e5fa0 RCX: 00007fedd978f7c9 [ 91.176516][ T6004] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 91.176526][ T6004] RBP: 00007fedd9813f91 R08: 0000000000000000 R09: 0000000000008000 [ 91.176537][ T6004] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 91.176545][ T6004] R13: 00007fedd99e6038 R14: 00007fedd99e5fa0 R15: 00007ffd6abcfd68 [ 91.176564][ T6004] [ 91.178144][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.283345][ T5837] Bluetooth: hci2: command tx timeout [ 91.315602][ T5834] Bluetooth: hci3: command tx timeout [ 91.382929][ T5840] Bluetooth: hci1: command tx timeout [ 91.486949][ T5844] Bluetooth: hci0: command tx timeout [ 91.488137][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 91.826045][ T90] cfg80211: failed to load regulatory.db [ 92.220242][ T6010] process 'syz.3.20' launched './file0' with NULL argv: empty string added [ 93.182240][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 93.266172][ T6036] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 93.314414][ T6036] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 93.322934][ T6038] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.891160][ T6056] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.564879][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'. [ 94.933764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.974428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.043659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.293392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.022532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 96.072869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.073978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.504442][ T6128] tipc: Started in network mode [ 97.509497][ T6128] tipc: Node identity ffffffff, cluster identity 4711 [ 97.516831][ T6128] tipc: Node number set to 4294967295 [ 97.790281][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.054689][ T6145] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 98.075206][ T6145] nbd: error processing sock list [ 98.433899][ T6155] netlink: 342 bytes leftover after parsing attributes in process `syz.3.52'. [ 98.472214][ T6154] bond0: Unable to set down delay as MII monitoring is disabled [ 99.199618][ T6161] zswap: compressor 000 not available [ 99.916666][ T6168] FAULT_INJECTION: forcing a failure. [ 99.916666][ T6168] name failslab, interval 1, probability 0, space 0, times 0 [ 99.940798][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 99.940837][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.940853][ T6168] Call Trace: [ 99.940863][ T6168] [ 99.940873][ T6168] dump_stack_lvl+0x16c/0x1f0 [ 99.940919][ T6168] should_fail_ex+0x512/0x640 [ 99.940949][ T6168] ? kmem_cache_alloc_noprof+0x62/0x770 [ 99.940987][ T6168] should_failslab+0xc2/0x120 [ 99.941027][ T6168] kmem_cache_alloc_noprof+0x83/0x770 [ 99.941061][ T6168] ? key_alloc+0xbef/0x1330 [ 99.941100][ T6168] ? key_alloc+0xbef/0x1330 [ 99.941132][ T6168] key_alloc+0xbef/0x1330 [ 99.941179][ T6168] ? __pfx_key_alloc+0x10/0x10 [ 99.941209][ T6168] ? __asan_memcpy+0x3c/0x60 [ 99.941251][ T6168] keyring_alloc+0x44/0xc0 [ 99.941292][ T6168] keyctl_get_persistent+0x750/0x8c0 [ 99.941333][ T6168] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 99.941369][ T6168] ? __sys_sendmsg+0x18c/0x220 [ 99.941407][ T6168] ? __x64_sys_futex+0x1e0/0x4c0 [ 99.941438][ T6168] ? __x64_sys_futex+0x1e9/0x4c0 [ 99.941477][ T6168] ? xfd_validate_state+0x61/0x180 [ 99.941501][ T6168] ? __pfx_ksys_write+0x10/0x10 [ 99.941545][ T6168] __do_sys_keyctl+0x1a9/0x590 [ 99.941585][ T6168] do_syscall_64+0xcd/0xf80 [ 99.941630][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.941657][ T6168] RIP: 0033:0x7ff5b298f7c9 [ 99.941679][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.941705][ T6168] RSP: 002b:00007ff5b388c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 99.941731][ T6168] RAX: ffffffffffffffda RBX: 00007ff5b2be5fa0 RCX: 00007ff5b298f7c9 [ 99.941751][ T6168] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 99.941768][ T6168] RBP: 00007ff5b2a13f91 R08: 000000000000000c R09: 0000000000000000 [ 99.941786][ T6168] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 99.941802][ T6168] R13: 00007ff5b2be6038 R14: 00007ff5b2be5fa0 R15: 00007ffc9d369568 [ 99.941840][ T6168] [ 100.589133][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 100.660765][ T6197] netlink: 13 bytes leftover after parsing attributes in process `syz.3.61'. [ 100.688573][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 100.743079][ T6202] program syz.0.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.967203][ T6208] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(512.0.1), cmd(16) [ 101.095623][ T6206] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(512.0.1), cmd(2) [ 101.347120][ T6213] netlink: 334 bytes leftover after parsing attributes in process `syz.3.65'. [ 101.506716][ T6217] random: crng reseeded on system resumption [ 101.559735][ T6217] Restarting kernel threads ... [ 101.577679][ T6217] Done restarting kernel threads. [ 101.785511][ T6222] openvswitch: netlink: Key 3 has unexpected len 142 expected 4 [ 102.661573][ T6236] netlink: 146 bytes leftover after parsing attributes in process `syz.0.72'. [ 102.765735][ T6254] netlink: 342 bytes leftover after parsing attributes in process `syz.3.74'. [ 104.478823][ T6279] FAULT_INJECTION: forcing a failure. [ 104.478823][ T6279] name failslab, interval 1, probability 0, space 0, times 0 [ 104.593729][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.0.81 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.593775][ T6279] Tainted: [L]=SOFTLOCKUP [ 104.593785][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.593800][ T6279] Call Trace: [ 104.593809][ T6279] [ 104.593819][ T6279] dump_stack_lvl+0x16c/0x1f0 [ 104.593872][ T6279] should_fail_ex+0x512/0x640 [ 104.593902][ T6279] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 104.593941][ T6279] should_failslab+0xc2/0x120 [ 104.593983][ T6279] kmem_cache_alloc_node_noprof+0x86/0x800 [ 104.594014][ T6279] ? do_syscall_64+0xcd/0xf80 [ 104.594051][ T6279] ? alloc_vmap_area+0x66f/0x2a50 [ 104.594098][ T6279] ? alloc_vmap_area+0x66f/0x2a50 [ 104.594134][ T6279] alloc_vmap_area+0x66f/0x2a50 [ 104.594196][ T6279] ? __pfx_alloc_vmap_area+0x10/0x10 [ 104.594248][ T6279] __get_vm_area_node+0x1ca/0x330 [ 104.594302][ T6279] __vmalloc_node_range_noprof+0x247/0x16b0 [ 104.594331][ T6279] ? n_tty_open+0x1a/0x170 [ 104.594353][ T6279] ? do_raw_spin_lock+0x12c/0x2b0 [ 104.594404][ T6279] ? n_tty_open+0x1a/0x170 [ 104.594439][ T6279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.594469][ T6279] ? __ldsem_down_write_nested+0xfd/0x850 [ 104.594513][ T6279] ? __ldsem_down_write_nested+0x10e/0x850 [ 104.594562][ T6279] ? lockdep_init_map_type+0x5c/0x270 [ 104.594597][ T6279] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 104.594647][ T6279] ? n_tty_open+0x1a/0x170 [ 104.594670][ T6279] __vmalloc_node_noprof+0xad/0xf0 [ 104.594697][ T6279] ? n_tty_open+0x1a/0x170 [ 104.594722][ T6279] ? __pfx_n_tty_open+0x10/0x10 [ 104.594748][ T6279] n_tty_open+0x1a/0x170 [ 104.594772][ T6279] ? __pfx_n_tty_open+0x10/0x10 [ 104.594796][ T6279] tty_ldisc_open+0x9f/0x120 [ 104.594836][ T6279] tty_ldisc_setup+0x40/0x100 [ 104.594873][ T6279] tty_init_dev.part.0+0x1ec/0x500 [ 104.594927][ T6279] tty_init_dev+0x60/0x80 [ 104.594974][ T6279] ptmx_open+0x15e/0x3c0 [ 104.595010][ T6279] ? __pfx_ptmx_open+0x10/0x10 [ 104.595041][ T6279] chrdev_open+0x234/0x6a0 [ 104.595082][ T6279] ? __pfx_apparmor_file_open+0x10/0x10 [ 104.595111][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 104.595154][ T6279] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 104.595199][ T6279] do_dentry_open+0x748/0x1590 [ 104.595234][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 104.595284][ T6279] vfs_open+0x82/0x3f0 [ 104.595317][ T6279] path_openat+0x2078/0x3140 [ 104.595368][ T6279] ? __pfx_path_openat+0x10/0x10 [ 104.595430][ T6279] do_filp_open+0x20b/0x470 [ 104.595470][ T6279] ? __pfx_do_filp_open+0x10/0x10 [ 104.595537][ T6279] ? alloc_fd+0x471/0x7d0 [ 104.595590][ T6279] do_sys_openat2+0x121/0x290 [ 104.595621][ T6279] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.595668][ T6279] __x64_sys_openat+0x174/0x210 [ 104.595705][ T6279] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.595752][ T6279] do_syscall_64+0xcd/0xf80 [ 104.595795][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.595828][ T6279] RIP: 0033:0x7fedd978f7c9 [ 104.595855][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.595882][ T6279] RSP: 002b:00007fedda658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.595909][ T6279] RAX: ffffffffffffffda RBX: 00007fedd99e5fa0 RCX: 00007fedd978f7c9 [ 104.595927][ T6279] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 104.595945][ T6279] RBP: 00007fedd9813f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.595962][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.595979][ T6279] R13: 00007fedd99e6038 R14: 00007fedd99e5fa0 R15: 00007ffd6abcfd68 [ 104.596022][ T6279] [ 104.986210][ T6279] syz.0.81: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 105.002577][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.0.81 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.002618][ T6279] Tainted: [L]=SOFTLOCKUP [ 105.002627][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.002643][ T6279] Call Trace: [ 105.002652][ T6279] [ 105.002661][ T6279] dump_stack_lvl+0x16c/0x1f0 [ 105.002713][ T6279] warn_alloc+0x248/0x3a0 [ 105.002748][ T6279] ? __pfx_warn_alloc+0x10/0x10 [ 105.002783][ T6279] ? __get_vm_area_node+0x2cd/0x330 [ 105.002831][ T6279] ? __get_vm_area_node+0x2cd/0x330 [ 105.002871][ T6279] ? __get_vm_area_node+0x208/0x330 [ 105.002919][ T6279] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 105.002960][ T6279] ? n_tty_open+0x1a/0x170 [ 105.002991][ T6279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.003019][ T6279] ? __ldsem_down_write_nested+0xfd/0x850 [ 105.003063][ T6279] ? __ldsem_down_write_nested+0x10e/0x850 [ 105.003122][ T6279] ? lockdep_init_map_type+0x5c/0x270 [ 105.003164][ T6279] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 105.003216][ T6279] ? n_tty_open+0x1a/0x170 [ 105.003238][ T6279] __vmalloc_node_noprof+0xad/0xf0 [ 105.003263][ T6279] ? n_tty_open+0x1a/0x170 [ 105.003286][ T6279] ? __pfx_n_tty_open+0x10/0x10 [ 105.003312][ T6279] n_tty_open+0x1a/0x170 [ 105.003336][ T6279] ? __pfx_n_tty_open+0x10/0x10 [ 105.003360][ T6279] tty_ldisc_open+0x9f/0x120 [ 105.003401][ T6279] tty_ldisc_setup+0x40/0x100 [ 105.003438][ T6279] tty_init_dev.part.0+0x1ec/0x500 [ 105.003482][ T6279] tty_init_dev+0x60/0x80 [ 105.003523][ T6279] ptmx_open+0x15e/0x3c0 [ 105.003554][ T6279] ? __pfx_ptmx_open+0x10/0x10 [ 105.003585][ T6279] chrdev_open+0x234/0x6a0 [ 105.003626][ T6279] ? __pfx_apparmor_file_open+0x10/0x10 [ 105.003655][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 105.003699][ T6279] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 105.003749][ T6279] do_dentry_open+0x748/0x1590 [ 105.003786][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 105.003838][ T6279] vfs_open+0x82/0x3f0 [ 105.003873][ T6279] path_openat+0x2078/0x3140 [ 105.003932][ T6279] ? __pfx_path_openat+0x10/0x10 [ 105.003987][ T6279] do_filp_open+0x20b/0x470 [ 105.004028][ T6279] ? __pfx_do_filp_open+0x10/0x10 [ 105.004105][ T6279] ? alloc_fd+0x471/0x7d0 [ 105.004163][ T6279] do_sys_openat2+0x121/0x290 [ 105.004194][ T6279] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.004240][ T6279] __x64_sys_openat+0x174/0x210 [ 105.004272][ T6279] ? __pfx___x64_sys_openat+0x10/0x10 [ 105.004319][ T6279] do_syscall_64+0xcd/0xf80 [ 105.004364][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.004399][ T6279] RIP: 0033:0x7fedd978f7c9 [ 105.004423][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.004451][ T6279] RSP: 002b:00007fedda658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.004476][ T6279] RAX: ffffffffffffffda RBX: 00007fedd99e5fa0 RCX: 00007fedd978f7c9 [ 105.004495][ T6279] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 105.004513][ T6279] RBP: 00007fedd9813f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.004531][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.004548][ T6279] R13: 00007fedd99e6038 R14: 00007fedd99e5fa0 R15: 00007ffd6abcfd68 [ 105.004588][ T6279] [ 105.004599][ T6279] Mem-Info: [ 105.350702][ T6279] active_anon:7191 inactive_anon:0 isolated_anon:0 [ 105.350702][ T6279] active_file:14011 inactive_file:40465 isolated_file:0 [ 105.350702][ T6279] unevictable:768 dirty:175 writeback:0 [ 105.350702][ T6279] slab_reclaimable:10844 slab_unreclaimable:92458 [ 105.350702][ T6279] mapped:28053 shmem:3147 pagetables:1159 [ 105.350702][ T6279] sec_pagetables:0 bounce:0 [ 105.350702][ T6279] kernel_misc_reclaimable:0 [ 105.350702][ T6279] free:1315613 free_pcp:23494 free_cma:0 [ 105.496022][ T6289] vhci_hcd vhci_hcd.0: invalid port number 16 [ 105.560791][ T6279] Node 0 active_anon:29364kB inactive_anon:0kB active_file:56044kB inactive_file:161664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106120kB dirty:692kB writeback:0kB shmem:11152kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11944kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.622499][ T6279] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.725105][ T6279] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.766320][ T6279] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 105.772278][ T6279] Node 0 DMA32 free:1367516kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27036kB inactive_anon:0kB active_file:56044kB inactive_file:161664kB unevictable:1536kB writepending:692kB zspages:0kB present:3129332kB managed:2541032kB mlocked:0kB bounce:0kB free_pcp:68884kB local_pcp:28368kB free_cma:0kB [ 105.824011][ T6279] lowmem_reserve[]: 0 0 1 1 1 [ 105.828862][ T6279] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.865531][ T6279] lowmem_reserve[]: 0 0 0 0 0 [ 105.882045][ T6279] Node 1 Normal free:3883272kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24368kB local_pcp:10816kB free_cma:0kB [ 105.915959][ T6279] lowmem_reserve[]: 0 0 0 0 0 [ 105.920778][ T6279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.943408][ T6279] Node 0 DMA32: 2549*4kB (UME) 802*8kB (UM) 652*16kB (UME) 364*32kB (UME) 300*64kB (UM) 196*128kB (UM) 107*256kB (UME) 43*512kB (UM) 18*1024kB (UM) 11*2048kB (UM) 292*4096kB (M) = 1369380kB [ 105.964919][ T6279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 105.977738][ T6279] Node 1 Normal: 222*4kB (UME) 64*8kB (UME) 49*16kB (UME) 66*32kB (UME) 25*64kB (UME) 6*128kB (UME) 5*256kB (UME) 1*512kB (M) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3883272kB [ 105.997911][ T6279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.007658][ T6279] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.017119][ T6279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.027995][ T6279] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.037525][ T6279] 57361 total pagecache pages [ 106.042337][ T6279] 0 pages in swap cache [ 106.047735][ T6279] Free swap = 124996kB [ 106.051961][ T6279] Total swap = 124996kB [ 106.058247][ T6279] 2097051 pages RAM [ 106.062119][ T6279] 0 pages HighMem/MovableOnly [ 106.066887][ T6279] 429767 pages reserved [ 106.071212][ T6279] 0 pages cma reserved [ 106.075585][ T6279] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 107.220256][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 107.951822][ T6328] netlink: 318 bytes leftover after parsing attributes in process `syz.3.95'. [ 108.329148][ T30] audit: type=1800 audit(1765824307.106:2): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.97" name="dbroot" dev="configfs" ino=10355 res=0 errno=0 [ 108.379732][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 109.696766][ T6356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.713551][ T6356] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.755361][ T6356] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.815246][ T6356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.821236][ T6356] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.898240][ T6356] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.925982][ T6356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.967293][ T6356] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.005399][ T6356] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.036691][ T6356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.072617][ T6356] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.090938][ T6356] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.121842][ T6356] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.304075][ T6378] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 110.634170][ T6380] zswap: compressor not available [ 111.408871][ T6385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.434633][ T6385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.442254][ T6385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.454265][ T6385] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.613533][ T6398] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 111.622739][ T6399] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 112.757952][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.472537][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.472550][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.479926][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 114.838654][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.552645][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 115.552711][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.558706][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.588003][ T6489] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 116.912590][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.227066][ T30] audit: type=1800 audit(1765824316.006:3): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.131" name="SYSV0000001e" dev="tmpfs" ino=0 res=0 errno=0 [ 117.632555][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 117.638711][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.644797][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.818898][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.856898][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.865188][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.874943][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.883701][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.417557][ T6520] chnl_net:caif_netlink_parms(): no params data found [ 118.655751][ T6536] ------------[ cut here ]------------ [ 118.661256][ T6536] WARNING: fs/exec.c:118 at path_noexec+0x1ca/0x230, CPU#1: syz.3.138/6536 [ 118.670155][ T6536] Modules linked in: [ 118.676297][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.3.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.688084][ T6536] Tainted: [L]=SOFTLOCKUP [ 118.692496][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 118.702735][ T6536] RIP: 0010:path_noexec+0x1ca/0x230 [ 118.709129][ T6536] Code: ff 83 e3 02 48 89 de e8 d4 30 82 ff 48 85 db 41 0f 95 c4 e8 f8 35 82 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 e7 35 82 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 79 13 eb ff e9 a8 fe ff ff e8 6f 13 eb [ 118.728875][ T6536] RSP: 0018:ffffc90005107c60 EFLAGS: 00010287 [ 118.735427][ T6536] RAX: 00000000000000b1 RBX: ffff888140ee4720 RCX: ffffc9000d06a000 [ 118.743579][ T6536] RDX: 0000000000080000 RSI: ffffffff823c2049 RDI: 0000000000000007 [ 118.752553][ T6536] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 118.761337][ T6536] R10: 0000000000000000 R11: ffff888031b38b30 R12: 0000000000000000 [ 118.769802][ T6536] R13: 0000000000000001 R14: 000000007c07f9f3 R15: ffff88805ad30ee8 [ 118.780139][ T6536] FS: 00007ff5b388c6c0(0000) GS:ffff8881249fd000(0000) knlGS:0000000000000000 [ 118.789224][ T6536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.795907][ T6536] CR2: 0000200000004000 CR3: 00000000789ae000 CR4: 00000000003526f0 [ 118.803968][ T6536] Call Trace: [ 118.807264][ T6536] [ 118.810213][ T6536] do_mmap+0xd23/0x1210 [ 118.814560][ T6536] ? __pfx_do_mmap+0x10/0x10 [ 118.819195][ T6536] ? __pfx_down_write_killable+0x10/0x10 [ 118.825043][ T6536] vm_mmap_pgoff+0x29e/0x470 [ 118.829722][ T6536] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 118.835173][ T6536] ? __fget_files+0x20e/0x3c0 [ 118.839895][ T6536] ksys_mmap_pgoff+0x32c/0x5c0 [ 118.844811][ T6536] __x64_sys_mmap+0x125/0x190 [ 118.849558][ T6536] do_syscall_64+0xcd/0xf80 [ 118.854143][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.860495][ T6536] RIP: 0033:0x7ff5b298f7c9 [ 118.865361][ T6536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.885049][ T6536] RSP: 002b:00007ff5b388c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 118.893512][ T6536] RAX: ffffffffffffffda RBX: 00007ff5b2be5fa0 RCX: 00007ff5b298f7c9 [ 118.901506][ T6536] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 118.909531][ T6536] RBP: 00007ff5b2a13f91 R08: 0000000000000003 R09: 0000000000008000 [ 118.917594][ T6536] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 118.925598][ T6536] R13: 00007ff5b2be6038 R14: 00007ff5b2be5fa0 R15: 00007ffc9d369568 [ 118.933672][ T6536] [ 118.936709][ T6536] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.944003][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.3.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.954789][ T6536] Tainted: [L]=SOFTLOCKUP [ 118.959126][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.969214][ T6536] Call Trace: [ 118.972495][ T6536] [ 118.975433][ T6536] dump_stack_lvl+0x3d/0x1f0 [ 118.980043][ T6536] vpanic+0x640/0x6f0 [ 118.984059][ T6536] ? path_noexec+0x1ca/0x230 [ 118.988759][ T6536] panic+0xca/0xd0 [ 118.992497][ T6536] ? __pfx_panic+0x10/0x10 [ 118.996932][ T6536] check_panic_on_warn+0xab/0xb0 [ 119.001878][ T6536] __warn+0x108/0x3c0 [ 119.005870][ T6536] __report_bug+0x2a0/0x520 [ 119.010381][ T6536] ? path_noexec+0x1ca/0x230 [ 119.014982][ T6536] ? __pfx___report_bug+0x10/0x10 [ 119.020024][ T6536] ? arch_get_unmapped_area_topdown+0x494/0x8f0 [ 119.026281][ T6536] ? aa_file_perm+0x29e/0x1560 [ 119.031062][ T6536] ? path_noexec+0x1ca/0x230 [ 119.035671][ T6536] report_bug+0xb2/0x220 [ 119.039923][ T6536] ? path_noexec+0x1ca/0x230 [ 119.044526][ T6536] handle_bug+0x127/0x260 [ 119.048860][ T6536] exc_invalid_op+0x17/0x50 [ 119.053366][ T6536] asm_exc_invalid_op+0x1a/0x20 [ 119.058222][ T6536] RIP: 0010:path_noexec+0x1ca/0x230 [ 119.063436][ T6536] Code: ff 83 e3 02 48 89 de e8 d4 30 82 ff 48 85 db 41 0f 95 c4 e8 f8 35 82 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 e7 35 82 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 79 13 eb ff e9 a8 fe ff ff e8 6f 13 eb [ 119.083236][ T6536] RSP: 0018:ffffc90005107c60 EFLAGS: 00010287 [ 119.089316][ T6536] RAX: 00000000000000b1 RBX: ffff888140ee4720 RCX: ffffc9000d06a000 [ 119.097314][ T6536] RDX: 0000000000080000 RSI: ffffffff823c2049 RDI: 0000000000000007 [ 119.105306][ T6536] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 119.113289][ T6536] R10: 0000000000000000 R11: ffff888031b38b30 R12: 0000000000000000 [ 119.121261][ T6536] R13: 0000000000000001 R14: 000000007c07f9f3 R15: ffff88805ad30ee8 [ 119.129252][ T6536] ? path_noexec+0x1c9/0x230 [ 119.133869][ T6536] do_mmap+0xd23/0x1210 [ 119.138055][ T6536] ? __pfx_do_mmap+0x10/0x10 [ 119.142660][ T6536] ? __pfx_down_write_killable+0x10/0x10 [ 119.148305][ T6536] vm_mmap_pgoff+0x29e/0x470 [ 119.152914][ T6536] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 119.158050][ T6536] ? __fget_files+0x20e/0x3c0 [ 119.162745][ T6536] ksys_mmap_pgoff+0x32c/0x5c0 [ 119.167530][ T6536] __x64_sys_mmap+0x125/0x190 [ 119.172223][ T6536] do_syscall_64+0xcd/0xf80 [ 119.176748][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.182649][ T6536] RIP: 0033:0x7ff5b298f7c9 [ 119.187068][ T6536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.206681][ T6536] RSP: 002b:00007ff5b388c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 119.215102][ T6536] RAX: ffffffffffffffda RBX: 00007ff5b2be5fa0 RCX: 00007ff5b298f7c9 [ 119.223078][ T6536] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 119.231051][ T6536] RBP: 00007ff5b2a13f91 R08: 0000000000000003 R09: 0000000000008000 [ 119.239029][ T6536] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 119.247007][ T6536] R13: 00007ff5b2be6038 R14: 00007ff5b2be5fa0 R15: 00007ffc9d369568 [ 119.255444][ T6536] [ 119.258816][ T6536] Kernel Offset: disabled [ 119.263143][ T6536] Rebooting in 86400 seconds..