last executing test programs: 1m48.162492855s ago: executing program 1 (id=15): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x801, 0x84) sendto$auto(r1, 0x0, 0x2000f, 0x20009, &(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1c) ioctl$auto(r0, 0xab0a, 0xffffffffffffffff) fadvise64$auto_POSIX_FADV_WILLNEED(r0, 0x400, 0x800, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0xa, 0x1, 0x100) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000440)={[0x10000000e85, 0x8, 0xfffffffffffffc01, 0xfffffffffffffffe, 0xfff9, 0x5, 0x15, 0x7fffffff, 0x1, 0x402, 0x4, 0x1c1, 0x0, 0x4, 0x8005]}, 0x0) sendmmsg$auto(r4, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000380), 0x100, 0x8}, 0x1a}, 0x3, 0x6) write$auto(r4, 0x0, 0xa3d9) sendfile$auto(r3, r3, 0x0, 0x7fff) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r5 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x42, 0x0) r6 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}, 0x1, 0x0, 0x0, 0x46080}, 0x1405805c) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fffffffd", @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf250a00000005000200000000000600010061c5000008000a000c000000060001005d00000008000a001803000006000100b438000008000a000100010008000a000200000008000a0006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x10902, 0x0) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x6) mmap$auto(0xfffffffffffffefc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1m45.766717685s ago: executing program 1 (id=25): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='{\x00', 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1p\x00', 0x20a02, 0x0) mmap$auto(0x5, 0x40009, 0xe0, 0x9b72, 0xffffffffffffffff, 0xa) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop2\x00', 0x200000, 0x0) open(0x0, 0x161342, 0x0) listmount$auto(&(0x7f00000000c0)={0x2, @inferred=r3, 0x5, 0x2, 0x9}, &(0x7f00000001c0)=0x6, 0x4, 0x101) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000100)={0x28, r5, 0x38f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), r7) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r8, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0) 1m43.49266939s ago: executing program 1 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='\"\x81=\"\xad\b\x00\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1P~\x17\xfb&L\xeb-j\a\xf1y\xb3\"\xaf~4:\x7f\x98\xcaeP\xe9N\x9f\xe1[YM\xf2\x1b\x975\xc5Q1\r\xd1\xa2\x88&T\xf0\xd4L\xcfO[\x89n\xady\xael\xc8\xa1\xc8\xa4f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x48) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sync_file_range$auto(r4, 0x8, 0x8, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) 1m40.952514374s ago: executing program 1 (id=37): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) r1 = prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0) read$auto(r2, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/flags\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000001c0)=',\xca\x02\xe4\vWs\xbb\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa0[', 0xffffffffffffffff) mmap$auto(0x7fff, 0x400008, 0x0, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x2, 0x3) mbind$auto(0xfffffffffffffffe, 0x2091d2, 0xfffffffffffffff3, 0x0, 0x1000000000000006, 0x2000002) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x1000008000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x1) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0xc4800, 0x0) read$auto(r4, 0x0, 0x39b6) write$auto(0x3, 0x0, 0xfffffdef) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0x0, 0x0, 0x8, 0xa6eb, 0x25, 0x100000000, 0x7, 0x7fffffff, 0x6, 0x9, 0x4, 0xd}) read$auto_clk_dump_fops_(r1, &(0x7f0000000040)=""/59, 0x3b) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/erspan0/temp_prefered_lft\x00', 0x88401, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r6, 0x0, 0x4000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) 1m40.427809372s ago: executing program 1 (id=39): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4F\xec\xb8\xb1Z|\xffGP\x97)\xaa\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\x8e\x023\xcc\xb4\xc4\x10\ba\x8ey\xbf\xd42N#\xd6\x1d\b\xfc\xf7\x1f>\xdf\xb9\x87C!\xd3PZ=#\xa5\xb7x\xd8\xbe\xac\xba\xf8!8', 0x20300000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, 0x100000, 0x5, 0xfffffffffffffffe, 0x1, 0x546, 0xc00, 0x2, 0x2c, 0x3, 0x2}) sysfs$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000040), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) madvise$auto(0xfffffffffffffffb, 0xfffffffffff7fffa, 0x3) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x8) mkdir$auto(0x0, 0x8001) mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00', &(0x7f00000001c0)='\xe2\xffS(\xc6\xd8eU=~\x82\x00\xaf\xa9\x82Z\xf3\xce\x04$f\x1f\xa1\x97\xed\xcf\xec\'\x9fK\x18\x11\x17.\xd3`D\xcc\x81Xn\x8c\xedd\x14:`\xe83_\xfaZ)\tiR\'v\xcf;\x94\xf5\xcc!\x86`\xec,\xdb\x1b(2\rW\x19:Ql\xf1\xf3\x98\xee\x89I\x9e}w\xf5\xc9\xcf\x8df \xf2\xf0\xba\x03ld4E\xbd\x92\xdc#E\xd1>\x9b\xef\xa6\xf1\xa5\x1a-\xe1\xdc\xa4\xf4 I\x80\xeam\xd9&~\xf252p\xf3\x17\xa3<\x87\xeapw\xf4\xa2(\xa4#M\xb5\x86\xa46}ld\x06\x9d\xbf\x97| \x15\xc5\xb7L\x11\xb3b\xd7\xa4\x1a\xb1\x96\x15}\xf8 \xed\x86J\xc72\'\x99O\xdd\x89i\x0f\xfc,U\x06BAK$J(\xcc<8\x87[\x020\x94\xfe\x91B\xf8\x8f/:\xc0\x9f|\x99\xd9H\x19e\x06\x89\x057!\x04\xb0%', 0xf, 0x0) prctl$auto(0x1000000003b, 0xf, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x2, 0x4, 0x8, 0x9) mmap$auto(0x4, 0xdda, 0xdd, 0x18, r0, 0x4) madvise$auto(0x0, 0x6, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) 1m25.289940154s ago: executing program 32 (id=39): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4F\xec\xb8\xb1Z|\xffGP\x97)\xaa\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\x8e\x023\xcc\xb4\xc4\x10\ba\x8ey\xbf\xd42N#\xd6\x1d\b\xfc\xf7\x1f>\xdf\xb9\x87C!\xd3PZ=#\xa5\xb7x\xd8\xbe\xac\xba\xf8!8', 0x20300000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, 0x100000, 0x5, 0xfffffffffffffffe, 0x1, 0x546, 0xc00, 0x2, 0x2c, 0x3, 0x2}) sysfs$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000040), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) madvise$auto(0xfffffffffffffffb, 0xfffffffffff7fffa, 0x3) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x8) mkdir$auto(0x0, 0x8001) mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00', &(0x7f00000001c0)='\xe2\xffS(\xc6\xd8eU=~\x82\x00\xaf\xa9\x82Z\xf3\xce\x04$f\x1f\xa1\x97\xed\xcf\xec\'\x9fK\x18\x11\x17.\xd3`D\xcc\x81Xn\x8c\xedd\x14:`\xe83_\xfaZ)\tiR\'v\xcf;\x94\xf5\xcc!\x86`\xec,\xdb\x1b(2\rW\x19:Ql\xf1\xf3\x98\xee\x89I\x9e}w\xf5\xc9\xcf\x8df \xf2\xf0\xba\x03ld4E\xbd\x92\xdc#E\xd1>\x9b\xef\xa6\xf1\xa5\x1a-\xe1\xdc\xa4\xf4 I\x80\xeam\xd9&~\xf252p\xf3\x17\xa3<\x87\xeapw\xf4\xa2(\xa4#M\xb5\x86\xa46}ld\x06\x9d\xbf\x97| \x15\xc5\xb7L\x11\xb3b\xd7\xa4\x1a\xb1\x96\x15}\xf8 \xed\x86J\xc72\'\x99O\xdd\x89i\x0f\xfc,U\x06BAK$J(\xcc<8\x87[\x020\x94\xfe\x91B\xf8\x8f/:\xc0\x9f|\x99\xd9H\x19e\x06\x89\x057!\x04\xb0%', 0xf, 0x0) prctl$auto(0x1000000003b, 0xf, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x2, 0x4, 0x8, 0x9) mmap$auto(0x4, 0xdda, 0xdd, 0x18, r0, 0x4) madvise$auto(0x0, 0x6, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) 6.989233322s ago: executing program 4 (id=300): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000200)='/dev/etherd/interfaces\x00', 0x200003, 0x0) r0 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000480)=0x9) write$auto_proc_mem_operations_base(r0, &(0x7f00000004c0)="f40a5f89f244aff5e66a2709a5e4736f85cf59c3bde8c5b825387588cc4c29e6b18fd06cbd5798588ab3087737c2fb5f22af394ba8e960e025002211fd4f2c2277edd8efbab013319bc8b36758b192c5b8b9b4575a57254e296caf2c890ffc42f5fcc71055535e1646f1f85da7d64e5cf5c11399f3977e8df8c249a48abe87b2f338d998e6024f3cd1f8450f03a72fead7808659a88c702874bb3fd097f30e76eb436e39", 0xa4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(0x0, 0x1e7d43, 0xa6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0xb00, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0xc0084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) sendfile$auto(r6, r6, 0x0, 0x4f64a1d2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000440)={&(0x7f0000000380)=0x8000000000000000, 0x101, &(0x7f00000003c0)="9937c97ae696a65d95255038ceeb5f581bffd0ed84f466b633c973e5f9650a2853c2b4", &(0x7f0000000400)=0x492}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r8, 0x5412, &(0x7f0000000040)) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) open(&(0x7f0000000240)='./file0\x00', 0x109200, 0x81) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r9}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.251440261s ago: executing program 0 (id=301): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) (async) io_uring_setup$auto(0x401, 0x0) (async) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) socket(0x3, 0x3, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0x32fa, &(0x7f0000000240)={[0x9, 0x5, 0x3, 0x5, 0x800, 0x2, 0x5, 0x1000, 0x9, 0x9, 0x8, 0x47, 0xd, 0x8, 0x5013, 0x1]}, &(0x7f00000002c0)={[0x9, 0xa, 0x101, 0x2, 0x4, 0x2, 0x8, 0xa, 0x2, 0x69b11ec, 0x62a10e5, 0x9, 0x0, 0x7fffffffffffffff, 0x9, 0x7]}, &(0x7f0000000340)={[0x9, 0x7, 0x1, 0x3, 0xd6b, 0xc, 0x0, 0x1, 0x3b4, 0x1, 0x6b68, 0xeacb, 0x26, 0x99, 0xd5f, 0x3]}, &(0x7f0000000180)={0x8, 0x51a}) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x7ffc) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfffffffffffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) (async) sendmmsg$auto(r4, 0x0, 0x7, 0x4008) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) 5.932559571s ago: executing program 4 (id=303): openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) shmctl$auto_SHM_INFO(0x2, 0xe, &(0x7f00000001c0)={{0x6, 0xee01, 0xffffffffffffffff, 0xbe, 0x9, 0x0, 0x4}, 0x90000000, 0x3, 0x9, 0x0, @raw=0xaa, @raw=0x3, 0x7, 0x0, &(0x7f0000000000)="2132016e8eee1dfe26d9165d50be168400cec7640ac32641d1390a3642b1aabf5a5bcfcbcdc12ef3243fa62f7ba720129f4210519ea2e4a387f7e46d9dbe07d9e0c452dec8ed1c9c353660820cf2c0fbdda67bee490339fec1cf14bfdca1e806add891cd95d21aa21a50de2c5e26af4b55fb60ece411fb5c0d810103e503cfe37f73d3ed43e07ae950fde951717fbd0911195904b03ab8", &(0x7f00000000c0)="055de274f37b6e533f86fc09924d8e1884b69c8fe2f0f4fa8b5ccfafc13f0450a723bd32397604f636b6e9469fd3"}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = seccomp$auto(0x3088bc2a, 0x8, &(0x7f0000000240)="efc13eab47ef0e2b98166bcb64a6a70a2f95ee9f97c7e013a709ac6ed3048e3cd68df9b87f7bc96a20750c6b8620aba9ec40a1f3b8a7a8f719c3065c55555342b2da2b711ac4856faff2920c40f3b695ee76ecc813cfe905ad9d3545eeba92e65eaf17c0f36a8d4fa1bd7364ae4fe1c689f8ded36dae4675be520a3a42d49e21ac85d52a37e173a55548eb9918666c7d3e98d7858481e05aa401638c7c7fad825fe00be2ac904b15a0224343977a2a67d3e3208b4a9b0ec56718e48eb99ced852eb52e36c48c303e71f526eb82d156fd6f97ff429a7ef9fdc2") waitid$auto_P_PIDFD(0x3, r3, &(0x7f00000006c0)={@_si_pad}, 0x8, &(0x7f0000000740)={{0x2, 0x400}, {0x7, 0x7ff}, 0x3, 0x1, 0xbde, 0x1000, 0x3ff, 0x3, 0x9, 0x7, 0x3, 0x8c, 0x3, 0xfffffffffffffff7, 0x6, 0x8}) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r4, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf256c00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x37c60ad6183ba5b}, 0x810) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r9 = semctl$auto(0x2efd, 0x6445d5d4, 0xfffffeff, 0x10000) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f0000000380)={{0x6, 0xee00, r1, 0x8, 0xe03, 0x80000000, 0x3}, 0x3, 0x3106, 0x100, 0x2, @raw=0x7dfd, @inferred=r9, 0x7, 0x0, &(0x7f0000000440)="ce51a88cfb7aa907d35e9e3ff338110d971da4ed490575e97219cf3e59f971c6ff531572078fe0587a633d96c32043be6fc4bef1c6a0446fac07dddda91726a1f77be6d737413e149b40f8af777edae31e790245d32718817bfc823bbc0e1a1bff301e2cb46c5223bba0e713001644c6edd187", &(0x7f00000004c0)="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"}) setresuid$auto(r10, r0, 0xee01) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) pwrite64$auto(r2, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0xa86b, 0x3ff) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x8, 0x1e, &(0x7f0000000140)='^:\x04/\x00', &(0x7f0000000400)=0x2) 5.582822508s ago: executing program 2 (id=304): r0 = socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/firmware/acpi/interrupts/ff_gbl_lock\x00', 0x183142, 0x0) (async) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x200000008000, 0xffffffff) mmap$auto(0x9, 0x2020009, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x800000100200002, 0x3, 0x14, 0x401, 0x7ffd) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x68100, 0x0) ioctl$auto(r3, 0x545c, r0) socket(0x2, 0x2, 0x0) mmap$auto(0x101, 0x20009, 0xdf, 0xeb1, r1, 0xffffffffffffffff) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) getcwd$auto(0x0, 0xfffffffffffdffff) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) fallocate$auto(r3, 0x400, 0x100, 0x8) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r6, 0x9204, 0x0) (async) sendfile$auto(r2, r5, 0x0, 0x1000200) (async) sysfs$auto(0x2, 0x1, 0x0) (async) mount$auto(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) (async) semctl$auto_SETALL(0x0, 0x2, 0x11, 0x4) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 5.349516796s ago: executing program 3 (id=305): mmap$auto(0x9, 0x2020009, 0x0, 0x73, 0xffffffffffffffff, 0x80000008000) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000680)='}\x00\x1a\x19\x16\xcb\xa2D\xee\xea\xb4\x8b\xa88:\xba~\x02\xf0\x9f\n\xd7)\xf1\xc4\xd6\xe9\xa3n\x03e\xee\xb80\xc4{\xc5\x02b\x12\xaf\xfc\xe7S5\xbf\xcc\xe3\b?\x03\x9fT\'\xf8\xfa\xcb\x01\xf4U^S\x9a\x16\x1f\xf7v\x98\xed8%\xe7\x1ern\x81\xb3\xc1\xb3\xfd\xbf\x8ag\x92\xab\x88\xdd\xfc\xad$\x06tl\x85\x8d\xcb\xbb\x03CA:\xac\xef\xae\xadt\xa5\xc8v\xdfK\x1a\xe9\x19\"\xd9$k\xcf\x97PT\xd3?\xd8\xd6\xde\xdf\x14\xcc\xb9\xb5\xa3y\xfa\xa9\x94\x1e.\xe5G\x8b\f\x80\x1d5\x83\xd7O', 0x20000005) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r2, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c020000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf25020000000c000280080001000400000008000100", @ANYRES32=0x0, @ANYBLOB="32000276ad2e8aa80cedbe9efdaca8d0e5bf93615e825569589f47c056cb140e431684d40b49834577fa8173bb1508b73e1200001002098008003300", @ANYRES32=0x0, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), r0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r7, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000800)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="444ab35efe4a953703c36f90659e3e2c01c1157f2ded6a32c329f458a85ee206bcef43e1403437edc36e75d65b9ae424fa0cb4c209a958d33358dd03209785f907d80aeec14f2584391785d821a4af211343852fee02e663a109dadd11de67e3a417e9aeb5c37383d1963ef7972e8d1a86356542490c00e8007f00000000000000650006002cd8db2cc1f3a28cf5f98c93402b04167478fc2d61ef4b6e5ec933735c48e16e704e9752b3d4eacff2230a009bad26155dffff2a6bd6e95f5a46fe6f8c7eca27c4cf1bae6b23bc6afe24805cea96192216f5004f293c702026e409fbec4a8580240000000000001400ca00fc00"/255], 0x2e8}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UI_SET_EVBIT(r0, 0x40045564, &(0x7f00000000c0)=0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x21, 0x8) madvise$auto(0xd5, 0x8, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) ioperm$auto(0x7, 0x86, 0x9) r8 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x40000, 0x0) dup2$auto(r8, r8) madvise$auto(0x0, 0x200007, 0x19) lseek$auto(0x3, 0x2, 0x4) r9 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) socketpair$auto(0x1e, 0x15, 0x80000000, 0x0) read$auto(r9, 0x0, 0x1f40) 5.175513494s ago: executing program 2 (id=306): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x9, 0x80000001, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x201, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1000000000]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd0b, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_udc.0/gadget.0/function\x00', 0x0, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r2, 0xc058560f, r2) 4.960591747s ago: executing program 0 (id=307): mmap$auto(0x9, 0x2020009, 0x0, 0x73, 0xffffffffffffffff, 0x80000008000) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000680)='}\x00\x1a\x19\x16\xcb\xa2D\xee\xea\xb4\x8b\xa88:\xba~\x02\xf0\x9f\n\xd7)\xf1\xc4\xd6\xe9\xa3n\x03e\xee\xb80\xc4{\xc5\x02b\x12\xaf\xfc\xe7S5\xbf\xcc\xe3\b?\x03\x9fT\'\xf8\xfa\xcb\x01\xf4U^S\x9a\x16\x1f\xf7v\x98\xed8%\xe7\x1ern\x81\xb3\xc1\xb3\xfd\xbf\x8ag\x92\xab\x88\xdd\xfc\xad$\x06tl\x85\x8d\xcb\xbb\x03CA:\xac\xef\xae\xadt\xa5\xc8v\xdfK\x1a\xe9\x19\"\xd9$k\xcf\x97PT\xd3?\xd8\xd6\xde\xdf\x14\xcc\xb9\xb5\xa3y\xfa\xa9\x94\x1e.\xe5G\x8b\f\x80\x1d5\x83\xd7O', 0x20000005) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r2, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c020000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf25020000000c000280080001000400000008000100", @ANYRES32=0x0, @ANYBLOB="32000276ad2e8aa80cedbe9efdaca8d0e5bf93615e825569589f47c056cb140e431684d40b49834577fa8173bb1508b73e1200001002098008003300", @ANYRES32=0x0, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), r0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r7, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000800)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="444ab35efe4a953703c36f90659e3e2c01c1157f2ded6a32c329f458a85ee206bcef43e1403437edc36e75d65b9ae424fa0cb4c209a958d33358dd03209785f907d80aeec14f2584391785d821a4af211343852fee02e663a109dadd11de67e3a417e9aeb5c37383d1963ef7972e8d1a86356542490c00e8007f00000000000000650006002cd8db2cc1f3a28cf5f98c93402b04167478fc2d61ef4b6e5ec933735c48e16e704e9752b3d4eacff2230a009bad26155dffff2a6bd6e95f5a46fe6f8c7eca27c4cf1bae6b23bc6afe24805cea96192216f5004f293c702026e409fbec4a8580240000000000001400ca00fc00"/255], 0x2e8}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UI_SET_EVBIT(r0, 0x40045564, &(0x7f00000000c0)=0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x21, 0x8) madvise$auto(0xd5, 0x8, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) ioperm$auto(0x7, 0x86, 0x9) r8 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x40000, 0x0) dup2$auto(r8, r8) madvise$auto(0x0, 0x200007, 0x19) lseek$auto(0x3, 0x2, 0x4) r9 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) socketpair$auto(0x1e, 0x15, 0x80000000, 0x0) read$auto(r9, 0x0, 0x1f40) 4.814486779s ago: executing program 2 (id=308): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x1e7d43, 0xa6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfffffff5) 4.715352475s ago: executing program 4 (id=309): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001900)={0xfc, r1, 0x1, 0x70bd2d, 0x25dfdbfa, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe6, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x11}, @nested={0xc, 0xa7, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x8d}]}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18", @nested={0x50, 0x5, 0x0, 0x1, [@nested={0x4c, 0x12b, 0x0, 0x1, [@nested={0x48, 0x9e, 0x0, 0x1, [@typed={0x44, 0x5a, 0x0, 0x0, @str='\x00\xc7\'{\x98\x14\xe1\t:(C\xeed.\xcf\n\xa5>HyR:\xdd\xbdu\x8a\xe9\x86\xd8\xd2\xf1Xa\xec4\x026j\x95\b|\xcal\rf\xa9\xf7\x05\x93\x9dM\xa7\xaaU\xd4\xc7@\x01\xb3\x9bo^5\xfe'}]}]}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c824) 4.374854891s ago: executing program 2 (id=310): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x2, 0x80, 0x0, 0x0, 0x3) (async) io_uring_setup$auto(0x4, 0x0) 4.316005363s ago: executing program 4 (id=311): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000200)='/dev/etherd/interfaces\x00', 0x200003, 0x0) r0 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000480)=0x9) write$auto_proc_mem_operations_base(r0, &(0x7f00000004c0)="f40a5f89f244aff5e66a2709a5e4736f85cf59c3bde8c5b825387588cc4c29e6b18fd06cbd5798588ab3087737c2fb5f22af394ba8e960e025002211fd4f2c2277edd8efbab013319bc8b36758b192c5b8b9b4575a57254e296caf2c890ffc42f5fcc71055535e1646f1f85da7d64e5cf5c11399f3977e8df8c249a48abe87b2f338d998e6024f3cd1f8450f03a72fead7808659a88c702874bb3fd097f30e76eb436e39", 0xa4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(0x0, 0x1e7d43, 0xa6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0xb00, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0xc0084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) sendfile$auto(r6, r6, 0x0, 0x4f64a1d2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000440)={&(0x7f0000000380)=0x8000000000000000, 0x101, &(0x7f00000003c0)="9937c97ae696a65d95255038ceeb5f581bffd0ed84f466b633c973e5f9650a2853c2b4", &(0x7f0000000400)=0x492}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r8, 0x5412, &(0x7f0000000040)) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) open(&(0x7f0000000240)='./file0\x00', 0x109200, 0x81) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r9}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.722414304s ago: executing program 0 (id=312): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x23, 0x80805, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) (async) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=0x0) getsockname$auto(r1, &(0x7f00000008c0)=@nfc={0x27, r2, 0x0, 0x3}, &(0x7f0000000900)=0x7) r3 = socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) (async) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x24) (async) read$auto(r1, 0x0, 0x24) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) (async) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000440)="0db1eb") (async) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000440)="0db1eb") mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', 0x0, 0x0, 0x1001) r7 = epoll_create$auto(0x8) epoll_ctl$auto(r7, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r3) 3.530405672s ago: executing program 4 (id=313): io_cancel$auto(0x3, &(0x7f0000000000)={0x3, 0x9, 0x0, 0x10, 0x8, 0x2, 0xff, 0x1, 0x7ff, 0x0, 0x3}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r1, 0x65, 0x76c044c9, 0x0, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010026bd7000fddbdf2507", @ANYRES64=r0, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008004}, 0x82) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc080) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000000)=""/192, 0xc0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) (async) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) (async) sendfile$auto(r6, r6, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) (async) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0xca, 0x0, 0x2d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="090329bd7000fddbdf2517"], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x20044840) (async) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="090329bd7000fddbdf2517"], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x20044840) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.006810614s ago: executing program 2 (id=314): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x15, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x8, 0x9, 0x1, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) unshare$auto(0x40) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) 2.746596207s ago: executing program 0 (id=315): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/fail\x00', 0x808882, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 2.601654814s ago: executing program 3 (id=316): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, 0x0) mmap$auto(0x0, 0x100000000030009, 0x9, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)) 2.275107661s ago: executing program 3 (id=317): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x0) ioctl$auto(0x3, 0x894b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0xffffffffffffffff, 0x8, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)={0x1128, r5, 0xb01, 0x70bd24, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_CONFIG={0x1114, 0x23, 0x0, 0x1, [@nested={0x1110, 0x7f, 0x0, 0x1, [@typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="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", @nested={0x4, 0x13b}, @typed={0x8, 0x88, 0x0, 0x0, @uid}, @typed={0xea, 0x3c, 0x0, 0x0, @binary="d71cc49392549301cb50a10e35c6a8edde51c19addb018e59e30319c668879d514d76080b554ec2098aa4298fed5496befbf7c3fbe02e365baf41835c710d197909e4965b1523eefe236ed69fd0b92618926be94de93b790d3de07d05e2855a2bb329f39bf38a9dd8df45309ea43d511ff76ded3cc2f2b63ed08fa33ab0c029e55174a50583e7e46380c5eacde7aba113d103395d8b8c416faee5eb4a9b21dbf5c4bcb81fc5f9e05e8d9da300c45422b613d7e960c60120d442a918778fc72536367db1100eb809ef2bc73afe1f07e926c4dd0b86fcc662dfa453bb9b48a839f589ee0ec7994"}, @generic]}]}]}, 0x1128}, 0x1, 0x0, 0x700000000000000, 0x8041}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x79a2d0ed}, @NL80211_ATTR_MLD_ADDR={0xfe, 0x13a, "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"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x96dc}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xfffffffa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff7}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='x\f\x00L', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250300000006000600810000000600070000800000060006000e0000000a00050000000000000000000a00010000000000000000000a000500aaaaaaaaaa400000080003003f000000080002"], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x44098) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xe733054f64a28f9e}, 0x801) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x9) 1.610602864s ago: executing program 0 (id=318): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) recvfrom$auto(r0, &(0x7f00000000c0)="bc6d98a3aa7199a036e78d17af91aaebe953eb862af5d03a6866c0e5c32bf2c9d7ab1a107e58d7571159dfa6283d7b59dcf9550ad917850219", 0x8, 0x7, &(0x7f0000000100)=@ax25={0x3, @default, 0x6}, &(0x7f0000000080)=0x9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400004, 0xdb, 0x9b72, 0x2, 0xfffb) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) socket(0x24, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x7fffffffffffffff, 0x4, 0x0, 0x5, 0xe) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="01002dbd7000fe3aa440020000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x8502, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto_BLKRRPART(r1, 0x125f, 0xfbffffffffffffff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) madvise$auto(0x0, 0xf663, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd$auto(r5, r6, 0xeffc) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="94f6ff9cbd08e75300", @ANYRES16, @ANYBLOB="000026bd7000fedbdf251b000000140004006d6163736563300000000000000000000800ef00ffff00001d0034c40098b433b85a41902c749efc0d0e00ea1257a51846f642d16f40c7369239559117a92c8d0b6dae730000001f0007002ea057c78387d69160bbcf007aa5f82a056bb1bd71eda05d1abb560012000a00aa569b171b222e0de916770d9f0a000006001a014000000008000100faffffff"], 0x94}}, 0x40080) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) pread64$auto(r4, 0x0, 0x100000009, 0x7) 1.467231973s ago: executing program 3 (id=319): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop15\x00', 0x6ea02, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x1000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x4400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x400, 0x0) eventfd$auto(0x95f2) read$auto(r1, &(0x7f0000002440)='&\x00', 0x9) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) r2 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) read$auto_trace_options_fops_trace(r2, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x40009, 0xdb, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x4b67, 0x38) 1.178167053s ago: executing program 3 (id=320): mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x3, 0xa}, 0x5, 0x3fc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0) read$auto_fops_blob_file(r1, 0x0, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x7ffffffe, 0xa, 0x0, 0x46) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0xaac, 0x4000000000df, 0x1e, 0x401, 0x8400) socket(0xa, 0x1, 0x100) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi17\x00', 0x280, 0x0) ioctl$auto(r3, 0xc0905664, 0x38) mmap$auto(0x0, 0x2, 0x20000000000df, 0xeb0, r0, 0xa) capget$auto(0x0, 0xfffffffffffffffe) r4 = open(0x0, 0x161342, 0x12a) statx$auto(r4, 0x0, 0xfffffffb, 0x2, 0x0) unshare$auto(0xdde) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) r5 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e22, @empty}, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="1300260000f7ff00000000", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.039869123s ago: executing program 2 (id=321): mmap$auto(0x9, 0x2020009, 0x0, 0x73, 0xffffffffffffffff, 0x80000008000) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000680)='}\x00\x1a\x19\x16\xcb\xa2D\xee\xea\xb4\x8b\xa88:\xba~\x02\xf0\x9f\n\xd7)\xf1\xc4\xd6\xe9\xa3n\x03e\xee\xb80\xc4{\xc5\x02b\x12\xaf\xfc\xe7S5\xbf\xcc\xe3\b?\x03\x9fT\'\xf8\xfa\xcb\x01\xf4U^S\x9a\x16\x1f\xf7v\x98\xed8%\xe7\x1ern\x81\xb3\xc1\xb3\xfd\xbf\x8ag\x92\xab\x88\xdd\xfc\xad$\x06tl\x85\x8d\xcb\xbb\x03CA:\xac\xef\xae\xadt\xa5\xc8v\xdfK\x1a\xe9\x19\"\xd9$k\xcf\x97PT\xd3?\xd8\xd6\xde\xdf\x14\xcc\xb9\xb5\xa3y\xfa\xa9\x94\x1e.\xe5G\x8b\f\x80\x1d5\x83\xd7O', 0x20000005) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r2, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c020000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf25020000000c000280080001000400000008000100", @ANYRES32=0x0, @ANYBLOB="32000276ad2e8aa80cedbe9efdaca8d0e5bf93615e825569589f47c056cb140e431684d40b49834577fa8173bb1508b73e1200001002098008003300", @ANYRES32=0x0, @ANYBLOB="ed001300e0816712ad20d10607ad7b90f88ee8617c3dde237e22acec2f76e9bdf3724e4d12404d02765ae67f4cb62184163099ddae1649528ba6cd508f2d95df50f374063681e4ce3c80a7f8cad0d06313e81f67e1f914a6e79b634b77e809e3248b8f985787bb2ff6c792ef4a4cf1d6ea245a600d9c9682f4993ba6bb57719be7d9f00d700c532d1a36a5a109af8c745ecb422baf2053de8618b9e352bb37af363303d7ba5cff1542040c2c4e9b0272bfa9bf0b2754e44e72663ad14cd4d4ce0be70ce9bd7b4e36addafecc9fbdab5bf1d67bad32aff47c31b6a52fbc73d8ec9e8fcc36a1e9fdcda0346538aa000000080098006401010009011180f3dbc35705b5b7164590642aae1ca9d62ee9ee7f01826016ce10914cd0cbb04ca5be41cac0ada51db9f489c70ea0235b19acf207ab6056de5a1d2ac380f57d7290f3a4e7ad94930e8c8c546b479c003eb5ac9aca374bfff6235dd2c9f3928ea3a7677fe1935caf332219ffee00572c22e12bbc92f6987ce958f950fe24c83776206103c7220bdc371deee489fd63d8183fb881b1bffe4130b3a90f558cdbdb1e243fbb2a81ca4587bb8d6554db881df93d3c4343c0b2f262b2ba7c92e1e70b9adb2c7298171bf120d06f9118154d01366ed8f8733a1cd85785d4e20e456578bedf1978776d14647944b81f84361c0935ac326bab2b14571dc1e4dfccdf05008c0000000000000000"], 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), r0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r7, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000800)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="444ab35efe4a953703c36f90659e3e2c01c1157f2ded6a32c329f458a85ee206bcef43e1403437edc36e75d65b9ae424fa0cb4c209a958d33358dd03209785f907d80aeec14f2584391785d821a4af211343852fee02e663a109dadd11de67e3a417e9aeb5c37383d1963ef7972e8d1a86356542490c00e8007f00000000000000650006002cd8db2cc1f3a28cf5f98c93402b04167478fc2d61ef4b6e5ec933735c48e16e704e9752b3d4eacff2230a009bad26155dffff2a6bd6e95f5a46fe6f8c7eca27c4cf1bae6b23bc6afe24805cea96192216f5004f293c702026e409fbec4a8580240000000000001400ca00fc00"/257], 0x2e8}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UI_SET_EVBIT(r0, 0x40045564, &(0x7f00000000c0)=0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x21, 0x8) madvise$auto(0xd5, 0x8, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) ioperm$auto(0x7, 0x86, 0x9) r8 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x40000, 0x0) dup2$auto(r8, r8) madvise$auto(0x0, 0x200007, 0x19) lseek$auto(0x3, 0x2, 0x4) r9 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) socketpair$auto(0x1e, 0x15, 0x80000000, 0x0) read$auto(r9, 0x0, 0x1f40) 938.857139ms ago: executing program 4 (id=322): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x3, 0x3a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001540)='/proc/bus/pci/00/01.1\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x306, 0x54, 0x1, 0x5, 0x6, @multicast}, 0x55) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) setsockopt$auto(r0, 0x6, 0xc, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 399.698082ms ago: executing program 3 (id=323): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vkms/drm/card1/card1-Writeback-1/modes\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'nr0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/quota/writes\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r9 = io_uring_setup$auto(0x6, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \f\x00\x00', @ANYRES16=r11, @ANYBLOB="01032abd7000fddbdf250100000009000280646bc0214d000000"], 0x20}}, 0x20000000) io_uring_register$auto(r9, 0x17, &(0x7f0000000000), 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r12, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x18, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000400c}, 0x4048000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd8966efb91b2e351f000008000300", @ANYRES32=r6], 0x28}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) statmount$auto(&(0x7f0000000080)={0x7e, @raw, 0x80000028, 0xe864, 0x7}, 0x0, 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'xfrm0\x00', 0x0}) rseq$auto(&(0x7f0000000300)={0x4, 0x8, 0x2, 0x7ffffffc, 0x17, 0x3, "d90926732f26c41017bf0021c9c2d3a8d58e4ae2e22c3ee73d2fa7c225a0b6f7f869cbc505f5ffcd0307b4a8572e679e02fbf4d0b0490ac3baa4d800c6a2ae91727a90c091c8532308b87d07bd03003d1962979ad0f0b9efabae66ec8ceaa562f328ac1c71d271f4accca60c3d65edcc5543417d91da7b4e7c1326ef559d53c4e84733da"}, 0x3, 0x5, 0xf8b) socket(0x2b, 0x1, 0x1) r16 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2b, 0x1, 0x1) recvmmsg$auto(r16, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80000001}, 0x1}, 0x3, 0x17, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESHEX=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB, @ANYRES32=r13], 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4054) 0s ago: executing program 0 (id=324): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) shmctl$auto(0x57, 0x7f, &(0x7f0000001440)={{0x1000, 0xee01, 0xffffffffffffffff, 0x7, 0x5, 0xad1, 0x3}, 0x1, 0x101, 0x0, 0x9, @inferred, @inferred, 0x3, 0x0, &(0x7f0000000340)="e79fa767299f7ec9241d639385b9b0b8d44c1d741dfc2ed98db278bc51830bd2319640983e8c91f00610e9ded0c3b0d86172e2af297724e6632fe56557b84b23bd4ba14893f08e6b961f69769bf7ed63d1d179e02c589108de5c50b5a88ecb09f83887078b9f81dacd9b53b1f38a497454b82b4b93e49eb6b7eb1044106c559318e19f41b97cf297a2096b30a06b5c6b1a073b34247267adc6f2a451f55f5f531532211dc6000b519b1be01d2e3399236b221092cd19d1623cae6fd2202721643ece3ffdaf721a1fb9750f4d038debc6d8338cc51bb9", &(0x7f0000000440)="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"}) msgctl$auto_IPC_INFO(0x3ff, 0x3, &(0x7f00000014c0)={{0x2, r1, 0xffffffffffffffff, 0x7, 0x9, 0x8001, 0x9}, &(0x7f0000000000)=0x1, &(0x7f0000000280)=0x9, 0x1, 0x0, 0x6, 0xd724, 0x5, 0x7, 0xef, 0x2, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000001540)={0x7ff, @inferred=r0, @raw=0x7, 0xfffffffffffffffb, 0x1, '\x00', {0x9, 0x0, 0x0, 0x0, 0xee00, 0x357, 0xb2, 0x0, {0x8, 0x4}, {0x5, 0xf4}, {0x1}, 0x43be, 0x0, 0x7, 0x6, 0x72, 0x1, 0xffff, 0x8fae, 0x3, 0x7, '\x00', 0x101, 0x80000001, 0xc2}}) keyctl$auto(0x9, r1, r2, r3, 0x9) write$auto_ucma_fops_ucma(r0, &(0x7f00000001c0)="160000003e47a70f", 0x8) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001640)='/proc/sys/net/ipv6/conf/ip6gretap0/mc_forwarding\x00', 0x204081, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x147602, 0x0) mmap$auto(0x0, 0x810004, 0xf78, 0x8000000008011, 0x3, 0x8000) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000007, 0x1, 0x80000001, 0xff, 0x5, 0x7, 0xfbfffffe, 0x5, 0x7fb, 0x7, 0x9}) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r6, 0x4601, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 97.381892][ T5816] cgroup: Unknown subsys name 'net' [ 97.496671][ T5816] cgroup: Unknown subsys name 'cpuset' [ 97.506341][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.383644][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.748087][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.755968][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.764622][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.772454][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.780278][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.787691][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.797338][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.808995][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.817411][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.817984][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.831319][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.833266][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.846830][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.854852][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.863401][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.871844][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.879581][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.887817][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.899732][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.919426][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.134768][ T1217] cfg80211: failed to load regulatory.db [ 102.399382][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 102.592899][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 102.680913][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 102.694248][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.701510][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.709317][ T5831] bridge_slave_0: entered allmulticast mode [ 102.716830][ T5831] bridge_slave_0: entered promiscuous mode [ 102.758794][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.766107][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.773476][ T5831] bridge_slave_1: entered allmulticast mode [ 102.780819][ T5831] bridge_slave_1: entered promiscuous mode [ 102.828821][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 102.899818][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.958955][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.988169][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.996485][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.003760][ T5832] bridge_slave_0: entered allmulticast mode [ 103.011093][ T5832] bridge_slave_0: entered promiscuous mode [ 103.058094][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.065409][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.073387][ T5832] bridge_slave_1: entered allmulticast mode [ 103.080698][ T5832] bridge_slave_1: entered promiscuous mode [ 103.087636][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.094834][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.102723][ T5834] bridge_slave_0: entered allmulticast mode [ 103.110027][ T5834] bridge_slave_0: entered promiscuous mode [ 103.160231][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.167569][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.175377][ T5834] bridge_slave_1: entered allmulticast mode [ 103.183205][ T5834] bridge_slave_1: entered promiscuous mode [ 103.194759][ T5831] team0: Port device team_slave_0 added [ 103.244337][ T5831] team0: Port device team_slave_1 added [ 103.263936][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.271174][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.278469][ T5837] bridge_slave_0: entered allmulticast mode [ 103.286600][ T5837] bridge_slave_0: entered promiscuous mode [ 103.297112][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.310517][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.336593][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.346711][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.354083][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.361330][ T5837] bridge_slave_1: entered allmulticast mode [ 103.369302][ T5837] bridge_slave_1: entered promiscuous mode [ 103.411613][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.462078][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.469116][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.496126][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.526521][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.555089][ T5832] team0: Port device team_slave_0 added [ 103.564537][ T5834] team0: Port device team_slave_0 added [ 103.572918][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.579922][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.606432][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.627513][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.652917][ T5834] team0: Port device team_slave_1 added [ 103.661317][ T5832] team0: Port device team_slave_1 added [ 103.740023][ T5837] team0: Port device team_slave_0 added [ 103.749575][ T5837] team0: Port device team_slave_1 added [ 103.757091][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.764218][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.790677][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.817071][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.824156][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.850349][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.875248][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.882638][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.909270][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.909337][ T5842] Bluetooth: hci0: command tx timeout [ 103.943880][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.951010][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.973173][ T5836] Bluetooth: hci3: command tx timeout [ 103.977852][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.982781][ T51] Bluetooth: hci2: command tx timeout [ 103.998950][ T5842] Bluetooth: hci1: command tx timeout [ 104.043085][ T5831] hsr_slave_0: entered promiscuous mode [ 104.049625][ T5831] hsr_slave_1: entered promiscuous mode [ 104.070694][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.077808][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.104015][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.117389][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.124584][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.151079][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.169199][ T5832] hsr_slave_0: entered promiscuous mode [ 104.175957][ T5832] hsr_slave_1: entered promiscuous mode [ 104.182918][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.190664][ T5832] Cannot create hsr debugfs directory [ 104.239881][ T5834] hsr_slave_0: entered promiscuous mode [ 104.246451][ T5834] hsr_slave_1: entered promiscuous mode [ 104.253475][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.261063][ T5834] Cannot create hsr debugfs directory [ 104.383215][ T5837] hsr_slave_0: entered promiscuous mode [ 104.389768][ T5837] hsr_slave_1: entered promiscuous mode [ 104.396164][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.403781][ T5837] Cannot create hsr debugfs directory [ 104.843626][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.860498][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.874075][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.895634][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.960060][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.971000][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.985842][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.999185][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.094326][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.111257][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.133724][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.148738][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.286908][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.300556][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.317473][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.340547][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.373598][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.421414][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.448191][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.478447][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.485745][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.498714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.505902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.530817][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.545337][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.552625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.595186][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.602511][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.721176][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.824475][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.859200][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.866433][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.926728][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.934022][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.973485][ T5842] Bluetooth: hci0: command tx timeout [ 106.032985][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.052208][ T5842] Bluetooth: hci1: command tx timeout [ 106.057777][ T5842] Bluetooth: hci2: command tx timeout [ 106.063820][ T51] Bluetooth: hci3: command tx timeout [ 106.185392][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.237715][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.244981][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.300201][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.307427][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.360001][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.380479][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.504922][ T5837] veth0_vlan: entered promiscuous mode [ 106.526210][ T5837] veth1_vlan: entered promiscuous mode [ 106.609562][ T5832] veth0_vlan: entered promiscuous mode [ 106.626569][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.676963][ T5832] veth1_vlan: entered promiscuous mode [ 106.735189][ T5837] veth0_macvtap: entered promiscuous mode [ 106.756239][ T5837] veth1_macvtap: entered promiscuous mode [ 106.794605][ T5831] veth0_vlan: entered promiscuous mode [ 106.825855][ T5832] veth0_macvtap: entered promiscuous mode [ 106.849668][ T5831] veth1_vlan: entered promiscuous mode [ 106.861257][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.899138][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.918843][ T5832] veth1_macvtap: entered promiscuous mode [ 106.936672][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.951132][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.961179][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.970561][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.009385][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.050747][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.074963][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.098393][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.107307][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.117057][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.125886][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.156705][ T5831] veth0_macvtap: entered promiscuous mode [ 107.203568][ T5831] veth1_macvtap: entered promiscuous mode [ 107.248398][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.267124][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.345160][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.366684][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.380343][ T5834] veth0_vlan: entered promiscuous mode [ 107.393141][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.401017][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.419127][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.428859][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.437744][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.447043][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.476283][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.500528][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.531378][ T5834] veth1_vlan: entered promiscuous mode [ 107.586702][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.588730][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.640970][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.758171][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.780910][ T5834] veth0_macvtap: entered promiscuous mode [ 107.781013][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.890045][ T5834] veth1_macvtap: entered promiscuous mode [ 107.901147][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.917223][ T5922] Zero length message leads to an empty skb [ 107.946772][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.955762][ T5925] pty pty175: ldisc open failed (-12), clearing slot 175 [ 107.991507][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.036132][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.056442][ T5836] Bluetooth: hci0: command tx timeout [ 108.064203][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.093319][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.131373][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.142910][ T5836] Bluetooth: hci2: command tx timeout [ 108.148385][ T5836] Bluetooth: hci3: command tx timeout [ 108.153987][ T5842] Bluetooth: hci1: command tx timeout [ 108.159744][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.249181][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.388888][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.442864][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.518409][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.529886][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.602610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.462263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.532190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.540824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.133729][ T5836] Bluetooth: hci0: command tx timeout [ 110.213137][ T5836] Bluetooth: hci3: command tx timeout [ 110.218578][ T5836] Bluetooth: hci1: command tx timeout [ 110.224209][ T51] Bluetooth: hci2: command tx timeout [ 110.374671][ T5963] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 111.462182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.762249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.875317][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 112.281441][ T5836] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 112.427032][ T5984] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 113.488596][ T6003] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 113.827177][ T6002] mkiss: ax0: crc mode is auto. [ 114.002147][ T6013] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 114.437727][ T6024] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 114.502422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.794171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.932180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.024845][ T6021] netlink: set zone limit has 8 unknown bytes [ 115.132472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.740555][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.841554][ T6044] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 115.893160][ T6044] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.933766][ T6044] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 115.955089][ T6044] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 116.004124][ T6044] raw: ffff888078000000 0000000000000000 00000008ffffffff 0000000000000000 [ 116.031850][ T6044] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 116.062126][ T6044] head: ffff888078000000 0000000000000000 00000008ffffffff 0000000000000000 [ 116.106624][ T6044] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 116.159205][ T6044] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 116.210038][ T6044] page dumped because: unmovable page [ 116.238312][ T6044] page_owner tracks the page as allocated [ 116.271921][ T6044] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/0), ts 101059763734, free_ts 75950420319 [ 116.446954][ T6044] post_alloc_hook+0x1c0/0x230 [ 116.481834][ T6044] get_page_from_freelist+0x1321/0x3890 [ 116.487594][ T6044] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 116.618550][ T6044] alloc_pages_mpol+0x1fb/0x550 [ 116.641906][ T6044] alloc_pages_noprof+0x131/0x390 [ 116.647033][ T6044] skb_page_frag_refill+0x186/0x5a0 [ 116.734150][ T6044] try_fill_recv+0x7e4/0x28a0 [ 116.778806][ T6044] virtnet_poll+0x1984/0x3c30 [ 116.794140][ T6044] __napi_poll.constprop.0+0xba/0x550 [ 116.845668][ T6044] net_rx_action+0xa9f/0xfe0 [ 116.911915][ T6044] handle_softirqs+0x216/0x8e0 [ 116.944723][ T6044] __irq_exit_rcu+0x109/0x170 [ 117.031957][ T6044] irq_exit_rcu+0x9/0x30 [ 117.036333][ T6044] common_interrupt+0xbf/0xe0 [ 117.041037][ T6044] asm_common_interrupt+0x26/0x40 [ 117.116629][ T6044] page last free pid 5493 tgid 5493 stack trace: [ 117.193261][ T6073] random: crng reseeded on system resumption [ 117.269698][ T6044] __free_frozen_pages+0x7fe/0x1180 [ 117.300832][ T6054] mmap: syz.3.29 (6054) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.355932][ T6044] __put_partials+0x16d/0x1c0 [ 117.397600][ T6044] qlist_free_all+0x4d/0x120 [ 117.532366][ T6044] kasan_quarantine_reduce+0x195/0x1e0 [ 117.537935][ T6044] __kasan_slab_alloc+0x69/0x90 [ 117.638976][ T6044] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 117.645120][ T6044] __alloc_skb+0x2b2/0x380 [ 117.649708][ T6044] alloc_skb_with_frags+0xe0/0x860 [ 117.655646][ T6044] sock_alloc_send_pskb+0x7fb/0x990 [ 117.702542][ T6044] unix_dgram_sendmsg+0x41a/0x1840 [ 117.722171][ T6044] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 117.786870][ T6044] sock_write_iter+0x4fc/0x5b0 [ 117.851817][ T6044] vfs_write+0x6c7/0x1150 [ 117.908756][ T6044] ksys_write+0x1f8/0x250 [ 117.924278][ T6044] do_syscall_64+0xcd/0x490 [ 117.928850][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.818167][ T6073] Restarting kernel threads ... [ 118.823599][ T6073] Done restarting kernel threads. [ 119.524945][ T6094] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 121.801519][ T6120] binder: 6119:6120 ioctl c018620c 0 returned -1 [ 122.629422][ T6126] netlink: 338 bytes leftover after parsing attributes in process `syz.3.46'. [ 122.638434][ T6126] macsec0: entered allmulticast mode [ 122.643885][ T6126] veth1_macvtap: entered allmulticast mode [ 122.856024][ T6132] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 122.978863][ T6132] netlink: zone id is out of range [ 122.996827][ T6132] netlink: zone id is out of range [ 123.006956][ T6132] netlink: zone id is out of range [ 123.031884][ T6132] netlink: zone id is out of range [ 123.092237][ T6132] netlink: zone id is out of range [ 123.097441][ T6132] netlink: zone id is out of range [ 123.151927][ T6132] netlink: zone id is out of range [ 123.157210][ T6132] netlink: zone id is out of range [ 123.172101][ T6132] netlink: zone id is out of range [ 123.177447][ T6132] netlink: zone id is out of range [ 124.220123][ T6149] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.244391][ T6153] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 125.178502][ T6160] syz.0.54 uses obsolete (PF_INET,SOCK_PACKET) [ 125.195136][ T6158] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 125.263195][ T6160] netlink: 354 bytes leftover after parsing attributes in process `syz.0.54'. [ 126.325853][ T6167] netlink: 19 bytes leftover after parsing attributes in process `syz.3.55'. [ 127.539889][ T6184] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 128.711192][ T6192] ======================================================= [ 128.711192][ T6192] WARNING: The mand mount option has been deprecated and [ 128.711192][ T6192] and is ignored by this kernel. Remove the mand [ 128.711192][ T6192] option from the mount to silence this warning. [ 128.711192][ T6192] ======================================================= [ 128.966153][ T6196] FAULT_INJECTION: forcing a failure. [ 128.966153][ T6196] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.990275][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.0.67 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 128.990317][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.990340][ T6196] Call Trace: [ 128.990350][ T6196] [ 128.990366][ T6196] dump_stack_lvl+0x16c/0x1f0 [ 128.990433][ T6196] should_fail_ex+0x512/0x640 [ 128.990481][ T6196] strncpy_from_user+0x3b/0x2e0 [ 128.990524][ T6196] getname_flags.part.0+0x8f/0x550 [ 128.990564][ T6196] getname_flags+0x93/0xf0 [ 128.990606][ T6196] do_sys_openat2+0xb8/0x1d0 [ 128.990638][ T6196] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.990676][ T6196] ? __sock_release+0x20b/0x270 [ 128.990719][ T6196] __x64_sys_openat+0x174/0x210 [ 128.990754][ T6196] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.990799][ T6196] do_syscall_64+0xcd/0x490 [ 128.990845][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.990874][ T6196] RIP: 0033:0x7f267b18e929 [ 128.990920][ T6196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.990949][ T6196] RSP: 002b:00007f267c0e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.990983][ T6196] RAX: ffffffffffffffda RBX: 00007f267b3b5fa0 RCX: 00007f267b18e929 [ 128.991003][ T6196] RDX: 0000000000060000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 128.991023][ T6196] RBP: 00007f267b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 128.991041][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.991058][ T6196] R13: 0000000000000000 R14: 00007f267b3b5fa0 R15: 00007ffe40eb2c28 [ 128.991097][ T6196] [ 129.513413][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035a91c00: rx timeout, send abort [ 129.523063][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035a91c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 131.949340][ T6234] FAULT_INJECTION: forcing a failure. [ 131.949340][ T6234] name failslab, interval 1, probability 0, space 0, times 1 [ 131.990092][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.3.72 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 131.990126][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.990140][ T6234] Call Trace: [ 131.990147][ T6234] [ 131.990156][ T6234] dump_stack_lvl+0x16c/0x1f0 [ 131.990197][ T6234] should_fail_ex+0x512/0x640 [ 131.990230][ T6234] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 131.990271][ T6234] should_failslab+0xc2/0x120 [ 131.990293][ T6234] __kmalloc_cache_noprof+0x6a/0x3e0 [ 131.990326][ T6234] ? alloc_netdev_mqs+0xf3a/0x1570 [ 131.990368][ T6234] alloc_netdev_mqs+0xf3a/0x1570 [ 131.990412][ T6234] slip_open+0x35c/0x1150 [ 131.990441][ T6234] ? __pfx___might_resched+0x10/0x10 [ 131.990465][ T6234] ? __pfx_n_tty_close+0x10/0x10 [ 131.990491][ T6234] ? find_held_lock+0x2b/0x80 [ 131.990516][ T6234] ? __pfx_slip_open+0x10/0x10 [ 131.990543][ T6234] ? down_write+0x14d/0x200 [ 131.990587][ T6234] ? __pfx_slip_open+0x10/0x10 [ 131.990616][ T6234] tty_ldisc_open+0x9c/0x120 [ 131.990650][ T6234] tty_set_ldisc+0x32b/0x780 [ 131.990688][ T6234] tty_ioctl+0xc2e/0x1640 [ 131.990728][ T6234] ? __pfx_tty_ioctl+0x10/0x10 [ 131.990774][ T6234] ? find_held_lock+0x2b/0x80 [ 131.990797][ T6234] ? hook_file_ioctl_common+0x145/0x410 [ 131.990830][ T6234] ? __fget_files+0x20e/0x3c0 [ 131.990872][ T6234] ? __pfx_tty_ioctl+0x10/0x10 [ 131.990911][ T6234] __x64_sys_ioctl+0x18e/0x210 [ 131.990942][ T6234] do_syscall_64+0xcd/0x490 [ 131.990982][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.991007][ T6234] RIP: 0033:0x7f806a38e929 [ 131.991025][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.991048][ T6234] RSP: 002b:00007f806b2df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.991070][ T6234] RAX: ffffffffffffffda RBX: 00007f806a5b5fa0 RCX: 00007f806a38e929 [ 131.991085][ T6234] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000008 [ 131.991099][ T6234] RBP: 00007f806a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.991114][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.991128][ T6234] R13: 0000000000000000 R14: 00007f806a5b5fa0 R15: 00007ffcd2bc0758 [ 131.991157][ T6234] [ 132.278972][ T6238] syz.3.72 (6238): attempted to duplicate a private mapping with mremap. This is not supported. [ 132.498984][ T6234] Falling back ldisc for ptm1. [ 133.072205][ T6254] net_ratelimit: 41 callbacks suppressed [ 133.072223][ T6254] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 133.122485][ T6255] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 136.416751][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.426427][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.438463][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.485740][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.494394][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.890055][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 137.101409][ T6315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.325131][ T6326] synth uevent: /module/orangefs: unknown uevent action string [ 137.910873][ T6326] ima: policy update failed [ 137.913198][ T30] audit: type=1807 audit(1751194480.607:2): UNKNOWN=ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџ [ 137.913372][ T30] audit: type=1802 audit(1751194480.607:3): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.87" res=0 errno=0 [ 137.913414][ T30] audit: type=1802 audit(1751194480.607:4): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.87" res=0 errno=0 [ 138.401812][ T6312] chnl_net:caif_netlink_parms(): no params data found [ 138.535104][ T5836] Bluetooth: hci4: command tx timeout [ 138.732406][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.753952][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.770680][ T6312] bridge_slave_0: entered allmulticast mode [ 138.792941][ T6312] bridge_slave_0: entered promiscuous mode [ 138.870912][ T6312] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.878341][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.885906][ T6312] bridge_slave_1: entered allmulticast mode [ 138.893479][ T6312] bridge_slave_1: entered promiscuous mode [ 139.048852][ T6312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.127686][ T6312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.202437][ T6345] netlink: 'syz.0.89': attribute type 16 has an invalid length. [ 139.210120][ T6345] netlink: 326 bytes leftover after parsing attributes in process `syz.0.89'. [ 139.636834][ T6345] veth1_macvtap: left promiscuous mode [ 139.740980][ T6312] team0: Port device team_slave_0 added [ 139.788725][ T6312] team0: Port device team_slave_1 added [ 140.122550][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.129565][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.292812][ T6312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.324590][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.334074][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.393110][ T6312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.612167][ T5836] Bluetooth: hci4: command tx timeout [ 140.628415][ T6312] hsr_slave_0: entered promiscuous mode [ 140.639186][ T6312] hsr_slave_1: entered promiscuous mode [ 140.652771][ T6312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.661316][ T6312] Cannot create hsr debugfs directory [ 142.296184][ T6312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.381585][ T6312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.522983][ T6312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.633596][ T6312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.692613][ T5836] Bluetooth: hci4: command tx timeout [ 143.110129][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.119975][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.790003][ T6312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.906776][ T6312] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.982378][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.989598][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.080263][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.087488][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.763316][ T6312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.777278][ T5836] Bluetooth: hci4: command tx timeout [ 145.891331][ T6422] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 146.112499][ T6422] netlink: zone id is out of range [ 146.157222][ T6422] netlink: zone id is out of range [ 146.220234][ T6422] netlink: zone id is out of range [ 146.302176][ T6422] netlink: zone id is out of range [ 146.390516][ T6422] netlink: zone id is out of range [ 146.404231][ T6312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.491958][ T6422] netlink: zone id is out of range [ 146.713970][ T6422] netlink: zone id is out of range [ 146.776172][ T6422] netlink: zone id is out of range [ 146.781367][ T6422] netlink: zone id is out of range [ 146.831825][ T6422] netlink: zone id is out of range [ 147.497564][ T6312] veth0_vlan: entered promiscuous mode [ 147.557398][ T6312] veth1_vlan: entered promiscuous mode [ 147.981647][ T6312] veth0_macvtap: entered promiscuous mode [ 148.125386][ T6312] veth1_macvtap: entered promiscuous mode [ 148.256753][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.294830][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.311164][ T6312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.339845][ T6312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.408572][ T6312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.427723][ T6312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.287046][ T6449] netlink: 5 bytes leftover after parsing attributes in process `syz.3.107'. [ 149.325126][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.353659][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.589316][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.612567][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.722977][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 149.763557][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.857918][ T6459] bridge_slave_1 (unregistering): left allmulticast mode [ 149.897693][ T6459] bridge_slave_1 (unregistering): left promiscuous mode [ 149.905153][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 149.919175][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.207806][ T6474] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 151.241356][ T6474] phram: not enough arguments [ 151.668097][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 151.937245][ T6482] net_ratelimit: 28 callbacks suppressed [ 151.937271][ T6482] netlink: zone id is out of range [ 152.067200][ T6482] netlink: zone id is out of range [ 152.111120][ T6486] netlink: 338 bytes leftover after parsing attributes in process `syz.0.116'. [ 152.142804][ T6482] netlink: zone id is out of range [ 152.232051][ T6486] veth1_macvtap: entered promiscuous mode [ 152.278768][ T6482] netlink: zone id is out of range [ 152.299503][ T6486] macsec0: entered allmulticast mode [ 152.319079][ T6486] veth1_macvtap: entered allmulticast mode [ 152.338767][ T6482] netlink: zone id is out of range [ 152.399518][ T6482] netlink: zone id is out of range [ 152.435885][ T6482] netlink: zone id is out of range [ 152.611898][ T6482] netlink: zone id is out of range [ 152.623138][ T6482] netlink: zone id is out of range [ 152.655024][ T6482] netlink: zone id is out of range [ 154.382442][ T6510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'. [ 156.557127][ T6539] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 156.580329][ T30] audit: type=1804 audit(1751194499.267:5): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.129" name="/newroot/sys/kernel/debug/tracing/available_events" dev="tracefs" ino=1070 res=1 errno=0 [ 156.865063][ T6543] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 156.893739][ T6505] syz.0.119 (6505) used greatest stack depth: 18952 bytes left [ 157.534966][ T30] audit: type=1326 audit(1751194500.237:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.0.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f267b18e929 code=0x0 [ 161.560717][ T6595] netlink: 338 bytes leftover after parsing attributes in process `syz.0.143'. [ 161.580489][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 161.766899][ T6604] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 161.846120][ T6604] net_ratelimit: 118 callbacks suppressed [ 161.846138][ T6604] netlink: zone id is out of range [ 161.913092][ T6604] netlink: zone id is out of range [ 161.918292][ T6604] netlink: zone id is out of range [ 161.998004][ T6604] netlink: zone id is out of range [ 162.053526][ T6604] netlink: zone id is out of range [ 162.101214][ T6604] netlink: zone id is out of range [ 162.132024][ T6604] netlink: zone id is out of range [ 162.219469][ T6604] netlink: zone id is out of range [ 162.283233][ T6604] netlink: zone id is out of range [ 162.310169][ T6604] netlink: zone id is out of range [ 163.175387][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a70c000: rx timeout, send abort [ 163.178235][ T6614] zram: Added device: zram1 [ 163.183966][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a70c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 166.515144][ T6646] netlink: 94 bytes leftover after parsing attributes in process `syz.2.157'. [ 167.567273][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a73e400: rx timeout, send abort [ 167.575815][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a73e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.035749][ T6672] snd_aloop snd_aloop.0: control 16781581:65533:8198:щ'x?FЂщ/шьzFЫЗfCЊсЊ:0 is already present [ 168.248959][ T5836] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 168.649734][ T6667] process 'syz.3.162' launched './file0' with NULL argv: empty string added [ 168.896906][ T6682] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 169.811104][ T6689] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 171.546306][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 172.124710][ T6707] team0: Port device team_slave_1 removed [ 172.357954][ T6716] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 175.693766][ T6754] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 175.765670][ T6754] net_ratelimit: 44 callbacks suppressed [ 175.765694][ T6754] netlink: zone id is out of range [ 175.924434][ T6754] netlink: zone id is out of range [ 175.939617][ T6754] netlink: zone id is out of range [ 176.184707][ T6754] netlink: zone id is out of range [ 176.197211][ T6754] netlink: zone id is out of range [ 176.328447][ T6754] netlink: zone id is out of range [ 176.447164][ T6754] netlink: zone id is out of range [ 176.502065][ T6754] netlink: zone id is out of range [ 176.564069][ T6754] netlink: zone id is out of range [ 176.636926][ T6754] netlink: zone id is out of range [ 178.321453][ T6785] input: jJЧИэИќ;9у%vј“ћЈlаQ  J86ж‘ as /devices/virtual/input/input7 [ 180.193893][ T6802] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 182.962077][ T6835] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 183.037594][ T6835] net_ratelimit: 46 callbacks suppressed [ 183.037611][ T6835] netlink: zone id is out of range [ 183.080663][ T6835] netlink: zone id is out of range [ 183.133800][ T6835] netlink: zone id is out of range [ 183.164772][ T6835] netlink: zone id is out of range [ 183.282127][ T6835] netlink: zone id is out of range [ 183.387109][ T6835] netlink: zone id is out of range [ 183.392616][ T6835] netlink: zone id is out of range [ 183.400739][ T6835] netlink: zone id is out of range [ 183.424385][ T6835] netlink: zone id is out of range [ 183.597431][ T6835] netlink: zone id is out of range [ 186.119971][ T6865] netlink: 5 bytes leftover after parsing attributes in process `syz.0.210'. [ 186.204524][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bfdd400: rx timeout, send abort [ 186.213009][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bfdd400: 0x0ffff: (3) A timeout occurred and this is the connection abort to close the session. [ 186.647084][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'. [ 187.931463][ T6894] netlink: 32 bytes leftover after parsing attributes in process `syz.2.218'. [ 188.305366][ T6900] netlink: 5 bytes leftover after parsing attributes in process `syz.4.221'. [ 188.327067][ T6900] net_ratelimit: 48 callbacks suppressed [ 188.327101][ T6900] openvswitch: netlink: Flow key attr not present in new flow. [ 188.866589][ T6918] snd_aloop snd_aloop.0: control 16781581:65533:8198:щ'x?FЂщ/шьzFЫЗfCЊсЊ:0 is already present [ 189.130975][ T6917] FAULT_INJECTION: forcing a failure. [ 189.130975][ T6917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.230044][ T6917] CPU: 1 UID: 0 PID: 6917 Comm: syz.0.225 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 189.230090][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.230108][ T6917] Call Trace: [ 189.230119][ T6917] [ 189.230136][ T6917] dump_stack_lvl+0x16c/0x1f0 [ 189.230193][ T6917] should_fail_ex+0x512/0x640 [ 189.230247][ T6917] core_sys_select+0x4c5/0xc10 [ 189.230309][ T6917] ? __pfx_core_sys_select+0x10/0x10 [ 189.230362][ T6917] ? futex_wait+0x120/0x380 [ 189.230442][ T6917] ? __pfx_do_futex+0x10/0x10 [ 189.230491][ T6917] kern_select+0x15d/0x1e0 [ 189.230534][ T6917] ? __pfx_kern_select+0x10/0x10 [ 189.230582][ T6917] ? xfd_validate_state+0x61/0x180 [ 189.230622][ T6917] ? __pfx_ksys_write+0x10/0x10 [ 189.230673][ T6917] __x64_sys_select+0xbd/0x160 [ 189.230715][ T6917] ? do_syscall_64+0x91/0x490 [ 189.230764][ T6917] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.230811][ T6917] do_syscall_64+0xcd/0x490 [ 189.230863][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.230896][ T6917] RIP: 0033:0x7f267b18e929 [ 189.230920][ T6917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.230951][ T6917] RSP: 002b:00007f267c0c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 189.230981][ T6917] RAX: ffffffffffffffda RBX: 00007f267b3b6080 RCX: 00007f267b18e929 [ 189.231001][ T6917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 189.231024][ T6917] RBP: 00007f267b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.231042][ T6917] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 189.231061][ T6917] R13: 0000000000000000 R14: 00007f267b3b6080 R15: 00007ffe40eb2c28 [ 189.231101][ T6917] [ 189.408400][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.893194][ T6932] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 189.961931][ T6932] netlink: zone id is out of range [ 190.031431][ T6904] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 190.035537][ T6932] netlink: zone id is out of range [ 190.105270][ T6905] input: jJЧИ-Жš9у%vј“ћЈlаQ  J86ж‘ as /devices/virtual/input/input8 [ 190.146943][ T6932] netlink: zone id is out of range [ 190.340905][ T6932] netlink: zone id is out of range [ 190.395768][ T6932] netlink: zone id is out of range [ 190.444163][ T6932] netlink: zone id is out of range [ 190.510853][ T6932] netlink: zone id is out of range [ 190.567557][ T6932] netlink: zone id is out of range [ 190.581659][ T6939] netlink: zone id is out of range [ 192.384560][ T6961] ubi0: attaching mtd0 [ 192.450493][ T6961] ubi0: scanning is finished [ 192.455190][ T6961] ubi0: empty MTD device detected [ 193.204126][ T6961] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 193.253803][ T6961] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 193.262972][ T6961] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 193.279037][ T6961] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 193.288729][ T6961] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 193.325003][ T6961] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 193.335701][ T6961] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 95778177 [ 193.345654][ T6961] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 193.381385][ T6979] ubi0: background thread "ubi_bgt0d" started, PID 6979 [ 195.098885][ T7006] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 195.316628][ T7006] net_ratelimit: 105 callbacks suppressed [ 195.316651][ T7006] netlink: zone id is out of range [ 195.328907][ T7006] netlink: zone id is out of range [ 195.334088][ T7006] netlink: zone id is out of range [ 195.516686][ T7006] netlink: zone id is out of range [ 195.525422][ T7006] netlink: zone id is out of range [ 195.547642][ T7006] netlink: zone id is out of range [ 195.850575][ T7006] netlink: zone id is out of range [ 195.868134][ T7006] netlink: zone id is out of range [ 195.882817][ T7006] netlink: zone id is out of range [ 195.925374][ T7006] netlink: zone id is out of range [ 197.968063][ T7035] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 198.550894][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'. [ 198.642039][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.725501][ T7046] bridge_slave_1 (unregistering): left allmulticast mode [ 198.774819][ T7046] bridge_slave_1 (unregistering): left promiscuous mode [ 198.816294][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.208480][ T7056] FAULT_INJECTION: forcing a failure. [ 199.208480][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 199.296630][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.4.259 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 199.296670][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.296686][ T7056] Call Trace: [ 199.296695][ T7056] [ 199.296706][ T7056] dump_stack_lvl+0x16c/0x1f0 [ 199.296755][ T7056] should_fail_ex+0x512/0x640 [ 199.296805][ T7056] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 199.296853][ T7056] should_failslab+0xc2/0x120 [ 199.296879][ T7056] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 199.296923][ T7056] ? __kernfs_new_node+0xd2/0x8e0 [ 199.296970][ T7056] __kernfs_new_node+0xd2/0x8e0 [ 199.297018][ T7056] ? __pfx___kernfs_new_node+0x10/0x10 [ 199.297069][ T7056] ? find_held_lock+0x2b/0x80 [ 199.297118][ T7056] ? kernfs_root+0xee/0x2a0 [ 199.297170][ T7056] kernfs_new_node+0x13c/0x1e0 [ 199.297228][ T7056] __kernfs_create_file+0x53/0x350 [ 199.297268][ T7056] sysfs_add_file_mode_ns+0x207/0x3c0 [ 199.297322][ T7056] internal_create_group+0x578/0xf30 [ 199.297381][ T7056] ? __pfx_internal_create_group+0x10/0x10 [ 199.297435][ T7056] ? kernfs_create_link+0x1bd/0x240 [ 199.297477][ T7056] internal_create_groups+0x9d/0x150 [ 199.297528][ T7056] device_add+0x6d1/0x1a70 [ 199.297567][ T7056] ? __pfx_device_add+0x10/0x10 [ 199.297600][ T7056] ? lockdep_init_map_type+0x5c/0x280 [ 199.297645][ T7056] ? __init_waitqueue_head+0xca/0x150 [ 199.297707][ T7056] netdev_register_kobject+0x182/0x3a0 [ 199.297750][ T7056] register_netdevice+0x13dc/0x2270 [ 199.297796][ T7056] ? __pfx_register_netdevice+0x10/0x10 [ 199.297843][ T7056] internal_dev_create+0x2d3/0x520 [ 199.297882][ T7056] ovs_vport_add+0x144/0x4d0 [ 199.297915][ T7056] new_vport+0x16/0x1d0 [ 199.297959][ T7056] ovs_dp_cmd_new+0x6ba/0xe60 [ 199.298017][ T7056] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 199.298071][ T7056] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 199.298116][ T7056] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 199.298175][ T7056] genl_family_rcv_msg_doit+0x206/0x2f0 [ 199.298218][ T7056] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 199.298258][ T7056] ? trace_cap_capable+0x18d/0x200 [ 199.298305][ T7056] ? bpf_lsm_capable+0x9/0x10 [ 199.298339][ T7056] ? security_capable+0x7e/0x260 [ 199.298387][ T7056] ? ns_capable+0xd7/0x110 [ 199.298417][ T7056] genl_rcv_msg+0x55c/0x800 [ 199.298458][ T7056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.298494][ T7056] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 199.298548][ T7056] netlink_rcv_skb+0x155/0x420 [ 199.298578][ T7056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.298617][ T7056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.298667][ T7056] ? netlink_deliver_tap+0x1ae/0xd30 [ 199.298704][ T7056] genl_rcv+0x28/0x40 [ 199.298737][ T7056] netlink_unicast+0x53d/0x7f0 [ 199.298774][ T7056] ? __pfx_netlink_unicast+0x10/0x10 [ 199.298827][ T7056] netlink_sendmsg+0x8d1/0xdd0 [ 199.298868][ T7056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.298917][ T7056] ____sys_sendmsg+0xa98/0xc70 [ 199.298987][ T7056] ? copy_msghdr_from_user+0x10a/0x160 [ 199.299054][ T7056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.299101][ T7056] ? __pfx_futex_wake_mark+0x10/0x10 [ 199.299155][ T7056] ___sys_sendmsg+0x134/0x1d0 [ 199.299208][ T7056] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.299254][ T7056] ? __lock_acquire+0x622/0x1c90 [ 199.299349][ T7056] __sys_sendmsg+0x16d/0x220 [ 199.299400][ T7056] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.299449][ T7056] ? __x64_sys_futex+0x1e0/0x4c0 [ 199.299514][ T7056] do_syscall_64+0xcd/0x490 [ 199.299567][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.299600][ T7056] RIP: 0033:0x7f46f198e929 [ 199.299625][ T7056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.299655][ T7056] RSP: 002b:00007f46f2850038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.299685][ T7056] RAX: ffffffffffffffda RBX: 00007f46f1bb5fa0 RCX: 00007f46f198e929 [ 199.299705][ T7056] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 199.299723][ T7056] RBP: 00007f46f1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 199.299741][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.299758][ T7056] R13: 0000000000000000 R14: 00007f46f1bb5fa0 R15: 00007ffe11a53758 [ 199.299806][ T7056] [ 200.460097][ T7069] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 200.819445][ T7076] net_ratelimit: 47 callbacks suppressed [ 200.819481][ T7076] netlink: zone id is out of range [ 200.894163][ T7076] netlink: zone id is out of range [ 200.909494][ T7062] zswap: compressor not available [ 200.936101][ T7076] netlink: zone id is out of range [ 200.941299][ T7076] netlink: zone id is out of range [ 200.955642][ T7076] netlink: zone id is out of range [ 200.960926][ T7076] netlink: zone id is out of range [ 200.966164][ T7076] netlink: zone id is out of range [ 200.971404][ T7076] netlink: zone id is out of range [ 200.976789][ T7076] netlink: zone id is out of range [ 200.982029][ T7076] netlink: zone id is out of range [ 201.022196][ T7056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.038893][ T7056] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.096381][ T7056] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.617396][ T7056] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.668219][ T7056] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.731145][ T7056] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.770075][ T7056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.802043][ T7056] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.851844][ T7056] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.906541][ T7056] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.963319][ T7056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.990118][ T7056] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.104293][ T7056] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.151813][ T7056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.198734][ T7056] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.268802][ T7056] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.394504][ T7056] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.526006][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.440675][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.265'. [ 203.644353][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.809225][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.980064][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.204210][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.534569][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.540954][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.604128][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.723914][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.883531][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.968014][ T7140] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 206.045207][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.286267][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.437393][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 206.682986][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.734894][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 206.860048][ T7168] capability: warning: `syz.2.280' uses 32-bit capabilities (legacy support in use) [ 207.461986][ T7148] kafs: addr_prefs: Invalid Command [ 207.705870][ T7190] snd_aloop snd_aloop.0: control 16781581:65533:8198:щ'x?FЂщ/шьzFЫЗfCЊсЊ:0 is already present [ 207.803287][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.962219][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.122240][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.362537][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.041428][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.201147][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.904461][ T7248] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 212.123878][ T7250] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 212.164596][ T7248] net_ratelimit: 47 callbacks suppressed [ 212.164617][ T7248] netlink: zone id is out of range [ 212.193029][ T7248] netlink: zone id is out of range [ 212.291535][ T7248] netlink: zone id is out of range [ 212.296747][ T7248] netlink: zone id is out of range [ 212.409911][ T7248] netlink: zone id is out of range [ 212.425414][ T7248] netlink: zone id is out of range [ 212.454391][ T7248] netlink: zone id is out of range [ 212.498549][ T7248] netlink: zone id is out of range [ 212.583110][ T7248] netlink: zone id is out of range [ 212.588284][ T7248] netlink: zone id is out of range [ 212.825202][ T7264] snd_aloop snd_aloop.0: control 16781581:65533:8198:щ'x?FЂщ/шьzFЫЗfCЊсЊ:0 is already present [ 212.927530][ T7261] FAULT_INJECTION: forcing a failure. [ 212.927530][ T7261] name failslab, interval 1, probability 0, space 0, times 0 [ 212.940970][ T7261] CPU: 0 UID: 0 PID: 7261 Comm: syz.0.298 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 212.941013][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.941032][ T7261] Call Trace: [ 212.941042][ T7261] [ 212.941054][ T7261] dump_stack_lvl+0x16c/0x1f0 [ 212.941113][ T7261] should_fail_ex+0x512/0x640 [ 212.941159][ T7261] ? fs_reclaim_acquire+0xae/0x150 [ 212.941202][ T7261] ? security_inode_init_security+0x13f/0x390 [ 212.941253][ T7261] should_failslab+0xc2/0x120 [ 212.941285][ T7261] __kmalloc_noprof+0xd2/0x510 [ 212.941345][ T7261] security_inode_init_security+0x13f/0x390 [ 212.941401][ T7261] ? __pfx_shmem_initxattrs+0x10/0x10 [ 212.941437][ T7261] ? __pfx_security_inode_init_security+0x10/0x10 [ 212.941493][ T7261] ? shmem_get_inode+0x73a/0xfb0 [ 212.941539][ T7261] shmem_symlink+0x135/0x9f0 [ 212.941593][ T7261] ? __pfx_shmem_symlink+0x10/0x10 [ 212.941641][ T7261] ? bpf_lsm_inode_permission+0x9/0x10 [ 212.941672][ T7261] ? security_inode_permission+0xbf/0x260 [ 212.941713][ T7261] ? inode_permission+0x156/0x630 [ 212.941763][ T7261] vfs_symlink+0x403/0x680 [ 212.941809][ T7261] do_symlinkat+0x261/0x310 [ 212.941863][ T7261] ? __pfx_do_symlinkat+0x10/0x10 [ 212.941915][ T7261] ? getname_flags.part.0+0x1c5/0x550 [ 212.941962][ T7261] __x64_sys_symlink+0x75/0x90 [ 212.942016][ T7261] do_syscall_64+0xcd/0x490 [ 212.942073][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.942107][ T7261] RIP: 0033:0x7f267b18e929 [ 212.942145][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.942175][ T7261] RSP: 002b:00007f267c0e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 212.942204][ T7261] RAX: ffffffffffffffda RBX: 00007f267b3b5fa0 RCX: 00007f267b18e929 [ 212.942224][ T7261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 212.942243][ T7261] RBP: 00007f267b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 212.942261][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.942280][ T7261] R13: 0000000000000000 R14: 00007f267b3b5fa0 R15: 00007ffe40eb2c28 [ 212.942321][ T7261] [ 213.993949][ T7280] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 214.476421][ T7293] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 214.748215][ T7302] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 214.907005][ T7304] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 215.323801][ T7309] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 216.692293][ T30] audit: type=1800 audit(1751194559.401:7): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.312" name="lu_gp_id" dev="configfs" ino=13277 res=0 errno=0 [ 217.459486][ T7352] netlink: 342 bytes leftover after parsing attributes in process `syz.4.313'. [ 217.579988][ T7358] netlink: 342 bytes leftover after parsing attributes in process `syz.4.313'. [ 219.563509][ T7380] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 219.660520][ T7380] net_ratelimit: 161 callbacks suppressed [ 219.660546][ T7380] netlink: zone id is out of range [ 219.696202][ T7380] netlink: zone id is out of range [ 219.701694][ T7380] netlink: zone id is out of range [ 219.748994][ T7380] netlink: zone id is out of range [ 219.798905][ T7380] netlink: zone id is out of range [ 219.825195][ T7380] netlink: zone id is out of range [ 219.947518][ T7380] netlink: zone id is out of range [ 219.952718][ T7380] netlink: zone id is out of range [ 220.003646][ T7386] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 220.011518][ T7386] #PF: supervisor instruction fetch in kernel mode [ 220.018052][ T7386] #PF: error_code(0x0010) - not-present page [ 220.024057][ T7386] PGD 8000000046865067 P4D 8000000046865067 PUD 0 [ 220.026058][ T7380] netlink: zone id is out of range [ 220.030631][ T7386] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 220.030662][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.0.324 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 220.043791][ T7380] netlink: zone id is out of range [ 220.053042][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.053066][ T7386] RIP: 0010:0x0 [ 220.053097][ T7386] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 220.053113][ T7386] RSP: 0018:ffffc9000edc79c8 EFLAGS: 00010287 [ 220.053138][ T7386] RAX: 00000000000008bd RBX: 0000000000000000 RCX: ffffc9000beaa000 [ 220.053159][ T7386] RDX: 0000000000080000 RSI: ffffea0001ce2d00 RDI: ffff888032fbd340 [ 220.053180][ T7386] RBP: ffffea0001ce2d00 R08: 0000000000000007 R09: 0000000000000000 [ 220.053201][ T7386] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001db8f3a [ 220.053222][ T7386] R13: ffff888032fbd340 R14: 0000000000000000 R15: dffffc0000000000 [ 220.125351][ T7386] FS: 00007f267c0e16c0(0000) GS:ffff88812485f000(0000) knlGS:0000000000000000 [ 220.134335][ T7386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.140969][ T7386] CR2: ffffffffffffffd6 CR3: 0000000059f74000 CR4: 00000000003526f0 [ 220.148991][ T7386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.157001][ T7386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.165014][ T7386] Call Trace: [ 220.168335][ T7386] [ 220.171307][ T7386] filemap_read_folio+0xc8/0x2a0 [ 220.176397][ T7386] ? __pfx_filemap_read_folio+0x10/0x10 [ 220.181993][ T7386] ? __filemap_get_folio+0x32b/0xc30 [ 220.187330][ T7386] ? down_read+0x13d/0x480 [ 220.191894][ T7386] do_read_cache_folio+0x263/0x5c0 [ 220.197066][ T7386] freader_get_folio+0x337/0x930 [ 220.202071][ T7386] freader_fetch+0xc2/0x5e0 [ 220.206647][ T7386] ? mt_find+0x3ef/0xa30 [ 220.210944][ T7386] __build_id_parse.isra.0+0xec/0x7a0 [ 220.216375][ T7386] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 220.222422][ T7386] ? __pfx_find_vma+0x10/0x10 [ 220.227154][ T7386] do_procmap_query+0xd96/0x1090 [ 220.232155][ T7386] ? do_vfs_ioctl+0x523/0x1a60 [ 220.236977][ T7386] ? __pfx_do_procmap_query+0x10/0x10 [ 220.242432][ T7386] procfs_procmap_ioctl+0x7d/0xb0 [ 220.247520][ T7386] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 220.253303][ T7386] __x64_sys_ioctl+0x18e/0x210 [ 220.258098][ T7386] do_syscall_64+0xcd/0x490 [ 220.262664][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.268593][ T7386] RIP: 0033:0x7f267b18e929 [ 220.273022][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.292661][ T7386] RSP: 002b:00007f267c0e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.301119][ T7386] RAX: ffffffffffffffda RBX: 00007f267b3b5fa0 RCX: 00007f267b18e929 [ 220.309108][ T7386] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000002 [ 220.317191][ T7386] RBP: 00007f267b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 220.325195][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.333189][ T7386] R13: 0000000000000000 R14: 00007f267b3b5fa0 R15: 00007ffe40eb2c28 [ 220.341189][ T7386] [ 220.344217][ T7386] Modules linked in: [ 220.348137][ T7386] CR2: 0000000000000000 [ 220.352320][ T7386] ---[ end trace 0000000000000000 ]--- [ 220.357784][ T7386] RIP: 0010:0x0 [ 220.361264][ T7386] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 220.368643][ T7386] RSP: 0018:ffffc9000edc79c8 EFLAGS: 00010287 [ 220.374742][ T7386] RAX: 00000000000008bd RBX: 0000000000000000 RCX: ffffc9000beaa000 [ 220.382735][ T7386] RDX: 0000000000080000 RSI: ffffea0001ce2d00 RDI: ffff888032fbd340 [ 220.390726][ T7386] RBP: ffffea0001ce2d00 R08: 0000000000000007 R09: 0000000000000000 [ 220.398711][ T7386] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001db8f3a [ 220.406694][ T7386] R13: ffff888032fbd340 R14: 0000000000000000 R15: dffffc0000000000 [ 220.414687][ T7386] FS: 00007f267c0e16c0(0000) GS:ffff88812485f000(0000) knlGS:0000000000000000 [ 220.423671][ T7386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.430288][ T7386] CR2: ffffffffffffffd6 CR3: 0000000059f74000 CR4: 00000000003526f0 [ 220.438280][ T7386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.446265][ T7386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.454262][ T7386] Kernel panic - not syncing: Fatal exception [ 220.460699][ T7386] Kernel Offset: disabled [ 220.465039][ T7386] Rebooting in 86400 seconds..