last executing test programs: 9.850828103s ago: executing program 0 (id=38): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/syscall\x00', 0x80002, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000040)=""/228, 0xe4) r1 = io_uring_setup$auto(0x7, &(0x7f0000000080)={0x7ffffffc, 0xbffffeff, 0x2, 0x6, 0x8, 0x8, 0xffffffffffffffff, [0x7, 0x0, 0x40], {0x6, 0x806, 0xf, 0x6, 0x2, 0x86, 0x0, 0x17f, 0x2}, {0xff, 0x401, 0x4f, 0x1032, 0x3, 0x1636, 0x4, 0x7, 0x100000004}}) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:17/adr\x00', 0x189002, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) (async) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r4) (async) sendfile$auto(r3, r3, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64$auto(r6, 0x0, 0x4, 0x80000000000006) (async) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dvmrp1\x00', 0x0}) ioctl$auto_XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000280)={r5, 0x0, 0x7eec, 0x3, 0x10000000000000, 0x2, [0xf, 0x1, 0xffffffff7fffffff, 0x8, 0x1, 0xb1a]}) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r7, 0x303, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @uid=0xee00}, @nested={0x37, 0x12f, 0x0, 0x1, [@nested={0x4, 0x65}, @generic="f8e78c127729014d5189b9bb35f03475135ac78dd9662417d2259d2e9257fc2f195e4487311ebc20e3c1df", @nested={0x4, 0xd8}]}, @typed={0x4, 0x11f, 0x0, 0x0, @binary}]}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040901}, 0x10) (async) r10 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9.24559796s ago: executing program 0 (id=39): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x8], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x10001}, {0x100, 0x40001, 0x10000072, 0x1000005, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x6) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x252780, 0x0) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250b001f000c00058008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x2000000, 0x0, 0x20010}, 0x20040880) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) ioctl$auto_BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000080)={0x8, 0x1, [0x4, 0x504, 0x10, 0x2, 0x100, 0x9dc]}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = socket(0x2, 0x5, 0x8) getsockopt$auto(r5, 0x84, 0x75, 0x0, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 7.954623505s ago: executing program 2 (id=44): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x7, 0x0) r0 = socket(0x2, 0x1, 0x106) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) mknod$auto(0x0, 0x67c1, 0x7fc) r1 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_fd=r0, r3, 0x99, 0x8, 0x1, @relative_id=0x8, 0x9}, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) connect$auto(0x3, &(0x7f0000000080)=@can={0x1d, r5}, 0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f000000cf40)={0x18, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040050) 7.585194855s ago: executing program 2 (id=45): recvfrom$auto(0x4, 0x0, 0x2, 0x3ffffa, 0x0, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, 0x0, 0x460881, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) writev$auto(0xffffffffffffffff, 0x0, 0x3) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x9) read$auto(0xffffffffffffffff, 0x0, 0xe8) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0xa, 0xffffffffffffffff, [0x0, 0x0, 0x2], {0x6, 0x6, 0x8c48, 0x29b, 0x8, 0x7f, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x2}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, &(0x7f0000000340)='\x00\x9aY\xa4d\xc2\xc0\x12\xc4\xb0c\xe6\x11\xe4|\x13\xaeO+\x14\x9a\xa0AK\x87\x83vj\x1b(\xf4\x11\x16\\\xc8x|\xd2\xd0\xa6\x80\x00T\xc0\xf4S=`\xcd\xc9y\x8a\xf0\t\x00\x00\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) io_uring_setup$auto(0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3f103b38", @ANYRES16, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000bfe32fc30796ee659e37d9386259d5cfe628d9cbbd67f123a07a85adfd2f6de2c7da29a01f47ef6fc3fd073a7fb5c3df126fa723fe38e35ee3e43c629b077cc7a29ea8980b7805593fba2412ad92e92d8dbff6a6009f33f86f665b837a808742921d5a01b99c27e5b7070586d19bf39b2cea725e35723277983644da868bd994457994be2dcfd969cb6d076a59b0145d4dbf", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf251200000008002c0006000000050008000500000008000300", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000850) write$auto(0x3, 0x0, 0x81) read$auto(0x3, 0x0, 0x7fffffff) r4 = socket(0x10, 0x2, 0x0) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r5, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="88150000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250400000074150380211447800800ed00", @ANYRES32, @ANYBLOB="538d39cb08964f1c45c0748c84f15826d558886473c6b0bebb8e769a9e26458754a4c6a2f8f0bae7e84ebbd5f9c19e95c09690adccf5f2820a82f846d0d88359be80f651ca343637053808eaf304c7582c78809d6891e4ade8206c97a9176e7fd5e31fcfe38beabea5e667eabc80b065f2fd405a7c4b2a93631face479c24cd81896cd0bb3e651d51cd219a69f2c6e277dc60633670a0c004d00090000000000000008001400", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="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"], 0x1588}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000380), r2) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) 6.735253663s ago: executing program 3 (id=47): read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000b00)=""/141, 0x8d) mmap$auto(0x100000000000000, 0xe986, 0xdf, 0x13, 0x401, 0x8004) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\b\x00\x00\x00\x00\x00\x00\x00\x01\x88\v\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\b\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/quota_mem_pressure_us\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r2 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x1000006a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r4, 0x0, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r5, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x207fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x7, 0xfffffffb, 0x2, 0x3e, 0x8) 6.169724407s ago: executing program 0 (id=48): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x2, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x8, 0x3, 0x0, 0x83) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x464702c8e97b77c) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x2300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x194, 0x0, 0xfffffffffffffffc, 0x0) prctl$auto(0x7, 0x201, 0x0, 0x5, 0x9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x7fffffffffffffff, 0x0) r5 = socket(0xa, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(r5, 0x0, 0x50, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x2, 0x7, 0x9b72, 0x2, 0xb8e) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 5.988701644s ago: executing program 1 (id=49): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) getpid() close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r2, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0x200, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 5.753636511s ago: executing program 3 (id=50): socket(0xa, 0x2, 0x0) mkdir$auto(&(0x7f0000000480)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000002c0)='nfsd\x00\vz\xb4~h\x14#\x0eG\xc7\xbfc\xdaX\xabj\xcbEj\xc5\xc8\x13M\xe7\x18P\x01y\xcbXy\xf3\x9d\x96\xb1\xf9\xa3X\xd5\x19\x15A\b\x17\xb8~\x9a\x18\x9b\xe4+X\xee[iU ?\x12\x9aL\xd9\xe3\xaf\xa4}\x02\x18r\x1d\v\x888\xdc;\x0fn\xbdC\x0e\x18\x1aT\xc2^\x13m\xcf\"\xf4\x80\x7f\xc1\a:9\ns\xea\x059tj\x89\xafc\xe9\x19\xe8D\xd6\xf4\xc0i0\x93\x1e,\xeeC\x89f*\x8e(Z\xc5\xff\xa19_\x94\xfemU\xb0\x8b\x17`\x84m\xaaY\x8d\x80\x8cC!\xb09~]E\xac)\xb9 u\xfe\xed\xeb\x99&\x8dCI\xa5\x81\x97!\x9dk\xcbK\xb1\xe1\x17\xd9mC\xc3\xcd\xb7!\xf2\xcf\x16\xf1(k\x8f\x01;.b\x85u\xd6\xf1\x86\xb85\xc8\xed\xffB5\x10\x95\xaf\x8e\xc5\x99\x9f\x9dDr.\x9e\xa84;\xf9\xcaj\xb0\a\xb3\x9c$@\xb3\nG\xe9\x15\x14u\xaa\xc2.g\xe9\xd2\xd1\"\xda|\x8c\x92\xf2\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x5, 0x80a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/jfs/TxAnchor\x00', 0x80000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x500, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) r2 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r2, &(0x7f0000001a40)="fb40e8", 0x3) madvise$auto(0x1ffff000, 0x7, 0x100000000) 5.350954595s ago: executing program 2 (id=52): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/conf/hsr_slave_1/ignore_routes_with_linkdown\x00', 0x14600, 0x0) (async, rerun: 64) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x6f2a, 0x0) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x743d, 0xfffff7fffffffff9, 0x7, 0x10001, 0x81000000, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x3550, 0x1ffffffffffe, 0x8, 0x10000, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x6, 0x200, 0x1000004, 0x84, 0x3, 0x0, 0x0, 0x4, 0x0, [0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40cc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x3, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe85, &(0x7f0000000200)={0x0, 0xffe7}}, 0x881) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async) madvise$auto(0x0, 0x400053, 0x9) (async, rerun: 32) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async, rerun: 32) pipe2$auto(0x0, 0x80) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) 4.422440514s ago: executing program 3 (id=53): mmap$auto(0x401000000000, 0x40000004020009, 0x6, 0x14, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40000e, 0xdf, 0x9b72, r0, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1, 0x6, 0x200000) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r4 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x802, 0x0) write$auto(r4, 0x0, 0x0) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) r5 = socket(0x8, 0x6, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_IMADDTIMER(r6, 0x80044940, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9d, 0x4, 0x2, 0x4, 0xdda, r1, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, r2, 0x9, 0x3, 0x6, 0xfffffffffffffff3, r5, r2}, 0x7ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 3.274572186s ago: executing program 1 (id=54): socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0x3, 0x0, 0x4000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2c, 0x3, 0x9) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7400fcdbdf250800000008000b00010000000800090000002000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x34, 0x28, &(0x7f0000000280)='!{\x00', 0x0) 2.86333982s ago: executing program 0 (id=55): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/protocols\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x585) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) write$auto(r1, 0x0, 0x100) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2000, 0x0) (async) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2000, 0x0) ioctl$auto_BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0xfffffffffffffffb, {0xffff, 0x9, 0x90a, 0x3, 0x5122}}) (async) ioctl$auto_BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0xfffffffffffffffb, {0xffff, 0x9, 0x90a, 0x3, 0x5122}}) close_range$auto(0x2, 0x8, 0x0) 2.744132298s ago: executing program 2 (id=56): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vrr_range_fops_(0xffffffffffffff9c, 0x0, 0xa8441, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) setreuid$auto(0x8, 0x9d7) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) read$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x1f, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x2, 0x80000000400000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0x11, 0x1, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vicodec.0/media1/dev\x00', 0x880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/97, 0x61) getpeername$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) 2.455880122s ago: executing program 0 (id=57): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) 2.332900989s ago: executing program 3 (id=58): ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181841, 0x0) write$auto(r0, &(0x7f0000000100)='9\x00\xa6\xcc\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x00\x00\x00\x00', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x16) r1 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x80000000, 0x2, 0x40ebd, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = io_uring_setup$auto(0x3, &(0x7f0000000080)={0x7fffffff, 0x6, 0x2, 0x6, 0xb, 0x400, 0xffffffffffffffff, [0x5, 0x101], {0x4, 0x2, 0xf, 0x29f, 0xfffffffd, 0x5, 0x3, 0x2, 0x2}, {0x102, 0x10001, 0x4f, 0x9, 0x4c9, 0x20000041, 0x7fffffff, 0x7, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0) ioctl$auto(r5, 0xc0305602, r4) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x810) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) read$auto_event_trigger_fops_trace(r2, &(0x7f0000000200)=""/233, 0xe9) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x14f, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) 1.961525004s ago: executing program 0 (id=59): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x50, 0x3, 0x7ffe) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r2 = socket(0xa, 0x5, 0x0) r3 = getsockopt$auto(r2, 0x0, 0xd, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) ioctl$auto(0xc8, 0x894c, 0x5c8d) write$auto(0x3, 0x0, 0x7fffffff) madvise$auto(0x4000000, 0x800, 0x1001) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x8000003e, 0x3, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x2a6, 0x7fffffffffffffff, 0x3, 0xebb, r4, 0x8000) pread64$auto(r6, 0x0, 0x1000f429, 0x4100) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/geneve/version\x00', 0x104800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMAXCID(r3, 0x40047451, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000280)=""/175, 0xaf) 1.804170097s ago: executing program 1 (id=60): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) read$auto(0xffffffffffffffff, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = wait4$auto(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x6, &(0x7f0000000080)={{0xd, 0x8000000000000000}, {0xd}, 0x80000000, 0xffffffffffffffff, 0x8, 0x8000, 0x3ff, 0x5, 0x80000000, 0x4, 0xfffffffffffffff3, 0xffff, 0x3, 0x75c5, 0x674, 0x8001}) prctl$auto(0x40, 0x6, r2, 0x2, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) dup3$auto(r0, r1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x28, 0x0, 0xc) 1.598359283s ago: executing program 2 (id=61): r0 = socket(0x37, 0x800, 0x1) (async, rerun: 64) r1 = socket(0xa, 0x2, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x703e}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r4 = setfsuid$auto(0x0) setuid$auto(r4) getsockopt$auto_SO_SNDBUF(r0, 0x2, 0x7, &(0x7f0000000280)='%,^\x00', &(0x7f00000002c0)=0x92) r5 = setfsuid$auto(0xee01) setresuid$auto(0x0, r5, 0x0) (async) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x1e0, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1cb, 0x4, 0x0, 0x1, [@nested={0x4, 0x110}, @nested={0x8, 0x133, 0x0, 0x1, [@nested={0x4, 0xb1}]}, @generic="d11bbf9ae3a870d4032477f3d74a82a9c576f78b7705c1536e18816fffda99b5ae9f4d64c5d888e24935b0573c3f62768f282044b5d7447fe7c6c87e21bbd7e0234005aef3c631fee8ff05058ef523d9ccb2828a98df3605d476c8adc75ae4eee9c889b06c1c46d12b6f9b0aa8f05c0806e362fe1edf3bcf572e4643030cd244d7d6bfffa609e60680d2ed04ab4e727b32c36a636fb9e0dea11c8018daf681d87797a5414117ccbef042a0704a", @nested={0xe5, 0x24, 0x0, 0x1, [@generic="f35e28f45641d9118e9f1c1751e24d6a1580cb82ff878864222f08612c2036b5b12ffded3805deff74c0566c90c7b335f64dd21ac9c606777afb9d82b1", @generic="27472fba12cfd2888afdfc9a01ef134fad91cae30f0cd3230b9010e0e0c0b029a80942cd5cb955b4da5e3d5e8a52981ad57d6c82df47e9fad2c0878bbb399e1c641f7e06700992752f356ce3261a0ddcf47502c306803a3e16b0f2e8cc60cdf2a3bd6da090a1e9d95e8d866077d07d1479b70e7679654ee03893c60a8cedf6e1", @typed={0x8, 0x91, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xff, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x11b}, @typed={0x5, 0x6, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x8}, @nested={0x4, 0xc7}]}, @typed={0x8, 0xb8, 0x0, 0x0, @str='%,^\x00'}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@empty}, @generic="dbe5cbb0c82ef57aed535027c78a59552757ba95daf9"]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NAME_TABLE={0x4b, 0x8, 0x0, 0x1, [@generic="1263bd537144e9534c8cd90318c7a46cb8bb83efa45a86197adeba51f35c1d004600ee8572119db27579c1d720b70d2b1cfcec417a4f15a392b7a6761bddea435224e9db0876a0"]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) 1.302460081s ago: executing program 3 (id=62): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = memfd_create$auto(0x0, 0x4) socket(0xa, 0x2, 0x3a) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r0, 0x4, 0x1, 0x0, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x4766, 0x0) r1 = socket(0x8, 0x5, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/version\x00', 0xa000, 0x0) mmap$auto(0xea2b, 0x40000c, 0xe2, 0x12, r1, 0xb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setns(0xffffffffffffffff, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5453, 0x0) write$auto(r4, 0x0, 0x100000a3d9) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/13u\x00', 0x200, 0x0) pread64$auto(r5, 0x0, 0x101, 0x103) waitid$auto(0x4, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0xfffffffa, 0xff, 0xd, @_kill={0xffffffffffffffff, 0xee00}}}, 0x15, &(0x7f00000011c0)={{0xfffffffffffffffb, 0x3}, {0x101, 0x100}, 0x5, 0x9, 0x80, 0xffffffff, 0x100, 0x3, 0x40, 0x3, 0x80000005, 0x9, 0xa7, 0x5, 0x7, 0x4b1}) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x2, 0x0, r6, 0x1, 0x666) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) r7 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r7, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10001}) 1.045262968s ago: executing program 2 (id=63): socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) socket(0x2d, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) socket(0x22, 0x2, 0x24) socket(0x22, 0x2, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) listen$auto(0x3, 0x81) socket(0x2, 0x1, 0x106) bind$auto(0xffffffffffffffff, 0x0, 0x80) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r0 = getsid$auto(0x0) pidfd_open$auto(r0, 0x6) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) socketpair$auto(0x80001, 0x6, 0x10000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 994.414018ms ago: executing program 1 (id=64): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x5, 0x84) r0 = io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$auto_TUNGETVNETLE(r1, 0x800454dd, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0xc080) mlockall$auto(0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000000000a4f, 0x8000000000083, 0xfffffffffffffff5, 0x11, r0, 0x6) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) madvise$auto(0x0, 0x2000040080000404, 0xe) write$auto(0xffffffffffffffff, 0x0, 0x81) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xea102, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x210000, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) 4.930435ms ago: executing program 1 (id=65): r0 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000640)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r1}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0xdf4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0xf8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9f8c}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0xffff, 0x3, 0x15f4da07, 0x3, 0x0, 0x65, 0x8000001f, 0x1000, 0x1000006d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 0s ago: executing program 3 (id=66): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x640d0) close_range$auto(0x2, 0x8, 0x0) ustat$auto(0x801, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x0, 0x29f, 0x100, 0x7f, 0xffffffff, 0x6, 0x2}, {0x8000100, 0x1, 0x8000052, 0x5, 0x1, 0x40, 0x76c5, 0x9a, 0x100000000}}) socket(0x2b, 0x1, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 79.026391][ T5818] cgroup: Unknown subsys name 'net' [ 79.144461][ T5818] cgroup: Unknown subsys name 'cpuset' [ 79.153528][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.651510][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.388493][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.403871][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.411750][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.420094][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.428826][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.431206][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.437970][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.444611][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.460199][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.461922][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.470152][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.475545][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.482280][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.489733][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.497748][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.503854][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.511254][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.525826][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.536092][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.555393][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.108691][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 83.126605][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 83.161561][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.191038][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 83.425834][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.433240][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.441439][ T5830] bridge_slave_0: entered allmulticast mode [ 83.448760][ T5830] bridge_slave_0: entered promiscuous mode [ 83.486262][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.493966][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.501467][ T5830] bridge_slave_1: entered allmulticast mode [ 83.508526][ T5830] bridge_slave_1: entered promiscuous mode [ 83.525654][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.532867][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.541474][ T5829] bridge_slave_0: entered allmulticast mode [ 83.548434][ T5829] bridge_slave_0: entered promiscuous mode [ 83.555806][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.563395][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.570648][ T5831] bridge_slave_0: entered allmulticast mode [ 83.578030][ T5831] bridge_slave_0: entered promiscuous mode [ 83.586043][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.593381][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.600994][ T5831] bridge_slave_1: entered allmulticast mode [ 83.609407][ T5831] bridge_slave_1: entered promiscuous mode [ 83.626437][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.634230][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.641514][ T5832] bridge_slave_0: entered allmulticast mode [ 83.648958][ T5832] bridge_slave_0: entered promiscuous mode [ 83.657157][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.664642][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.672522][ T5829] bridge_slave_1: entered allmulticast mode [ 83.679718][ T5829] bridge_slave_1: entered promiscuous mode [ 83.707077][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.714382][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.722018][ T5832] bridge_slave_1: entered allmulticast mode [ 83.729042][ T5832] bridge_slave_1: entered promiscuous mode [ 83.758646][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.790072][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.802257][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.823949][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.835605][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.857226][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.868627][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.899469][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.944265][ T5830] team0: Port device team_slave_0 added [ 83.969809][ T5831] team0: Port device team_slave_0 added [ 83.977529][ T5830] team0: Port device team_slave_1 added [ 83.985014][ T5832] team0: Port device team_slave_0 added [ 83.993953][ T5829] team0: Port device team_slave_0 added [ 84.001871][ T5831] team0: Port device team_slave_1 added [ 84.019830][ T5832] team0: Port device team_slave_1 added [ 84.035847][ T5829] team0: Port device team_slave_1 added [ 84.095220][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.102310][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.128722][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.141404][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.148478][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.175093][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.207727][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.215151][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.241880][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.253947][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.260955][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.286936][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.298636][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.306216][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.332737][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.345859][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.353073][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.380336][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.406272][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.413456][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.440603][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.452574][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.460228][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.487605][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.551371][ T5152] Bluetooth: hci1: command tx timeout [ 84.593796][ T5831] hsr_slave_0: entered promiscuous mode [ 84.600194][ T5831] hsr_slave_1: entered promiscuous mode [ 84.613428][ T5830] hsr_slave_0: entered promiscuous mode [ 84.619921][ T5830] hsr_slave_1: entered promiscuous mode [ 84.627111][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 84.633380][ T5152] Bluetooth: hci3: command tx timeout [ 84.633521][ T5833] Bluetooth: hci2: command tx timeout [ 84.639240][ T5830] Cannot create hsr debugfs directory [ 84.645141][ T52] Bluetooth: hci0: command tx timeout [ 84.667718][ T5829] hsr_slave_0: entered promiscuous mode [ 84.674049][ T5829] hsr_slave_1: entered promiscuous mode [ 84.680111][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 84.686111][ T5829] Cannot create hsr debugfs directory [ 84.722294][ T5832] hsr_slave_0: entered promiscuous mode [ 84.729450][ T5832] hsr_slave_1: entered promiscuous mode [ 84.736006][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 84.742211][ T5832] Cannot create hsr debugfs directory [ 85.192493][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.206953][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.217897][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.236853][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.309528][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.324866][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.336252][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.348988][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.441863][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.459904][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.471782][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.487235][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.605702][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.613924][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.626414][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.637229][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.649849][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.706110][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.720920][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.728403][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.774837][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.782592][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.824617][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.896943][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.917993][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.933211][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.940329][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.979087][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.986291][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.998256][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.035813][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.042977][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.054229][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.061462][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.115621][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.186994][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.219877][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.227012][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.270261][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.277424][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.350696][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.559313][ T5829] veth0_vlan: entered promiscuous mode [ 86.601777][ T5829] veth1_vlan: entered promiscuous mode [ 86.640360][ T52] Bluetooth: hci1: command tx timeout [ 86.711798][ T5833] Bluetooth: hci2: command tx timeout [ 86.711807][ T5152] Bluetooth: hci3: command tx timeout [ 86.723067][ T52] Bluetooth: hci0: command tx timeout [ 86.729092][ T5829] veth0_macvtap: entered promiscuous mode [ 86.779926][ T5829] veth1_macvtap: entered promiscuous mode [ 86.814202][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.848717][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.861251][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.878885][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.889175][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.912645][ T3885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.922778][ T3885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.938173][ T3885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.965303][ T3885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.129092][ T5831] veth0_vlan: entered promiscuous mode [ 87.216746][ T5831] veth1_vlan: entered promiscuous mode [ 87.223528][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.237089][ T5832] veth0_vlan: entered promiscuous mode [ 87.251823][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.277079][ T5830] veth0_vlan: entered promiscuous mode [ 87.314182][ T5832] veth1_vlan: entered promiscuous mode [ 87.346301][ T5830] veth1_vlan: entered promiscuous mode [ 87.365189][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.381377][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.462515][ T5831] veth0_macvtap: entered promiscuous mode [ 87.480280][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.489243][ T5832] veth0_macvtap: entered promiscuous mode [ 87.504982][ T5831] veth1_macvtap: entered promiscuous mode [ 87.523842][ T5830] veth0_macvtap: entered promiscuous mode [ 87.542765][ T5832] veth1_macvtap: entered promiscuous mode [ 87.565738][ T5830] veth1_macvtap: entered promiscuous mode [ 87.586668][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.626580][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.651430][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.679222][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.702280][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.709800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.719292][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.733446][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.752504][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.782128][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.803439][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.835411][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.850184][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.882164][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.897192][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.925663][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.967024][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.008365][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.021177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.058140][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.137268][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.156972][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.258771][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.285200][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.314641][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.343607][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.394921][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.423598][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.475632][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.561074][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.715241][ T5833] Bluetooth: hci1: command tx timeout [ 88.753079][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.790796][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.792642][ T52] Bluetooth: hci0: command tx timeout [ 88.801183][ T5152] Bluetooth: hci3: command tx timeout [ 88.803727][ T5833] Bluetooth: hci2: command tx timeout [ 88.983575][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.371461][ T5941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.568840][ T5937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.895514][ T5932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.917413][ T5932] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.987255][ T5932] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.032056][ T5932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.051611][ T5932] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.091941][ T5932] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.111929][ T5932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.119748][ T5932] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.182620][ T5932] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.230478][ T5932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.250227][ T5932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.259439][ T5932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.389687][ T5949] random: crng reseeded on system resumption [ 91.261053][ T5970] openvswitch: netlink: Flow key attribute not present in set flow. [ 91.269645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.282841][ T5963] FAULT_INJECTION: forcing a failure. [ 91.282841][ T5963] name failslab, interval 1, probability 0, space 0, times 1 [ 91.289323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.297457][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 91.297495][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.297515][ T5963] Call Trace: [ 91.297524][ T5963] [ 91.297535][ T5963] dump_stack_lvl+0x16c/0x1f0 [ 91.297580][ T5963] should_fail_ex+0x512/0x640 [ 91.297632][ T5963] ? __kmalloc_node_noprof+0xcd/0x930 [ 91.297674][ T5963] should_failslab+0xc2/0x120 [ 91.297716][ T5963] __kmalloc_node_noprof+0xee/0x930 [ 91.297753][ T5963] ? alloc_slab_obj_exts+0x43/0xf0 [ 91.297780][ T5963] ? find_held_lock+0x2b/0x80 [ 91.297820][ T5963] ? alloc_slab_obj_exts+0x43/0xf0 [ 91.297847][ T5963] alloc_slab_obj_exts+0x43/0xf0 [ 91.297875][ T5963] __memcg_slab_post_alloc_hook+0x24b/0x880 [ 91.297925][ T5963] ? kasan_save_track+0x14/0x30 [ 91.297964][ T5963] kmem_cache_alloc_lru_noprof+0x58f/0x770 [ 91.297999][ T5963] ? __d_alloc+0x35/0xa80 [ 91.298045][ T5963] ? __d_alloc+0x35/0xa80 [ 91.298084][ T5963] __d_alloc+0x35/0xa80 [ 91.298128][ T5963] d_alloc_parallel+0x111/0x1510 [ 91.298162][ T5963] ? widen_string+0xdc/0x2d0 [ 91.298206][ T5963] ? __lock_acquire+0x436/0x2890 [ 91.298234][ T5963] ? __pfx_d_alloc_parallel+0x10/0x10 [ 91.298271][ T5963] ? lockdep_init_map_type+0x5c/0x270 [ 91.298300][ T5963] ? lockdep_init_map_type+0x5c/0x270 [ 91.298333][ T5963] __lookup_slow+0x193/0x460 [ 91.298363][ T5963] ? __pfx___lookup_slow+0x10/0x10 [ 91.298397][ T5963] ? irq_entries_start+0xd0/0xcb0 [ 91.298433][ T5963] ? irq_entries_start+0xd0/0xcb0 [ 91.298470][ T5963] lookup_slow+0x50/0x70 [ 91.298500][ T5963] lookup_noperm_positive_unlocked+0xd5/0x110 [ 91.298542][ T5963] debugfs_lookup+0xc9/0x150 [ 91.298584][ T5963] kvm_dev_ioctl+0xf1c/0x1a80 [ 91.298632][ T5963] ? find_held_lock+0x2b/0x80 [ 91.298665][ T5963] ? hook_file_ioctl_common+0x144/0x410 [ 91.298694][ T5963] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 91.298743][ T5963] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 91.298781][ T5963] __x64_sys_ioctl+0x18e/0x210 [ 91.298816][ T5963] do_syscall_64+0xcd/0xf80 [ 91.298851][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.298878][ T5963] RIP: 0033:0x7f389cd8f7c9 [ 91.298906][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.298932][ T5963] RSP: 002b:00007f389dbe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.298959][ T5963] RAX: ffffffffffffffda RBX: 00007f389cfe5fa0 RCX: 00007f389cd8f7c9 [ 91.298978][ T5963] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000c [ 91.298996][ T5963] RBP: 00007f389ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.299013][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.299030][ T5963] R13: 00007f389cfe6038 R14: 00007f389cfe5fa0 R15: 00007ffd66f06438 [ 91.299068][ T5963] [ 91.836846][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.903548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.072567][ T981] cfg80211: failed to load regulatory.db [ 92.078334][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.164573][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.233320][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.236694][ T5986] ubi0: attaching mtd0 [ 92.295373][ T5986] ubi0: scanning is finished [ 92.337338][ T5986] ubi0: empty MTD device detected [ 92.415335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.646423][ T5986] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.653989][ T5986] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 92.687201][ T5986] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.742195][ T5986] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 92.749729][ T5986] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 92.775463][ T5986] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 92.825508][ T5986] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1559258276 [ 92.836213][ T5986] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 92.856040][ T5990] ubi0: detaching mtd0 [ 92.859661][ T5994] ubi0: background thread "ubi_bgt0d" started, PID 5994 [ 92.934424][ T5980] syz.3.12 (5980) used greatest stack depth: 17576 bytes left [ 92.951931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.086529][ T5990] ubi0: mtd0 is detached [ 93.334847][ T5996] FAULT_INJECTION: forcing a failure. [ 93.334847][ T5996] name failslab, interval 1, probability 0, space 0, times 0 [ 93.384750][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 93.384787][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.384802][ T5996] Call Trace: [ 93.384811][ T5996] [ 93.384821][ T5996] dump_stack_lvl+0x16c/0x1f0 [ 93.384856][ T5996] should_fail_ex+0x512/0x640 [ 93.384894][ T5996] ? fs_reclaim_acquire+0xae/0x150 [ 93.384935][ T5996] should_failslab+0xc2/0x120 [ 93.384973][ T5996] __kmalloc_noprof+0xeb/0x910 [ 93.385000][ T5996] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 93.385033][ T5996] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 93.385063][ T5996] tomoyo_realpath_from_path+0xc2/0x6e0 [ 93.385100][ T5996] tomoyo_check_open_permission+0x2ab/0x3c0 [ 93.385150][ T5996] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 93.385228][ T5996] ? do_raw_spin_lock+0x12c/0x2b0 [ 93.385270][ T5996] tomoyo_file_open+0x6b/0x90 [ 93.385304][ T5996] security_file_open+0x84/0x1e0 [ 93.385325][ T5996] do_dentry_open+0x597/0x1590 [ 93.385360][ T5996] ? security_inode_permission+0xbf/0x260 [ 93.385396][ T5996] vfs_open+0x82/0x3f0 [ 93.385428][ T5996] path_openat+0x2078/0x3140 [ 93.385475][ T5996] ? __pfx_path_openat+0x10/0x10 [ 93.385545][ T5996] do_filp_open+0x20b/0x470 [ 93.385584][ T5996] ? __pfx_do_filp_open+0x10/0x10 [ 93.385640][ T5996] ? alloc_fd+0x471/0x7d0 [ 93.385680][ T5996] do_sys_openat2+0x11f/0x280 [ 93.385706][ T5996] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.385757][ T5996] __x64_sys_openat+0x174/0x210 [ 93.385791][ T5996] ? __pfx___x64_sys_openat+0x10/0x10 [ 93.385832][ T5996] do_syscall_64+0xcd/0xf80 [ 93.385866][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.385891][ T5996] RIP: 0033:0x7f58d1b8f7c9 [ 93.385913][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.385937][ T5996] RSP: 002b:00007f58d29a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.385959][ T5996] RAX: ffffffffffffffda RBX: 00007f58d1de5fa0 RCX: 00007f58d1b8f7c9 [ 93.385974][ T5996] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 93.385990][ T5996] RBP: 00007f58d1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.386007][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.386022][ T5996] R13: 00007f58d1de6038 R14: 00007f58d1de5fa0 R15: 00007ffc603d35e8 [ 93.386060][ T5996] [ 93.491134][ T5996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.711217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.912228][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.031027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.031787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.160832][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.230905][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.313652][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.522562][ T6027] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[6027] [ 95.990947][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.230942][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.310875][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.390820][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.849789][ T6043] Zero length message leads to an empty skb syzkaller syzkaller login: [ 99.166094][ T6072] process 'syz.1.25' launched './file0' with NULL argv: empty string added [ 101.586798][ T6108] FAULT_INJECTION: forcing a failure. [ 101.586798][ T6108] name failslab, interval 1, probability 0, space 0, times 0 [ 101.730202][ T6108] CPU: 0 UID: 0 PID: 6108 Comm: syz.1.32 Not tainted syzkaller #0 PREEMPT(full) [ 101.730241][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.730257][ T6108] Call Trace: [ 101.730266][ T6108] [ 101.730278][ T6108] dump_stack_lvl+0x16c/0x1f0 [ 101.730319][ T6108] should_fail_ex+0x512/0x640 [ 101.730362][ T6108] ? __kmalloc_cache_noprof+0x5f/0x800 [ 101.730398][ T6108] should_failslab+0xc2/0x120 [ 101.730436][ T6108] __kmalloc_cache_noprof+0x80/0x800 [ 101.730463][ T6108] ? ptrace_may_access+0x35/0x50 [ 101.730502][ T6108] ? sched_core_share_pid+0x3c1/0x9d0 [ 101.730541][ T6108] ? do_raw_spin_unlock+0x172/0x230 [ 101.730576][ T6108] ? sched_core_share_pid+0x3c1/0x9d0 [ 101.730611][ T6108] sched_core_share_pid+0x3c1/0x9d0 [ 101.730677][ T6108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.730723][ T6108] ? __pfx_sched_core_share_pid+0x10/0x10 [ 101.730760][ T6108] ? static_key_count+0x5a/0x70 [ 101.730797][ T6108] ? security_task_prctl+0x11c/0x160 [ 101.730849][ T6108] __do_sys_prctl+0x317/0x2220 [ 101.730882][ T6108] ? __pfx___do_sys_prctl+0x10/0x10 [ 101.730915][ T6108] do_syscall_64+0xcd/0xf80 [ 101.730950][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.730978][ T6108] RIP: 0033:0x7f0d1198f7c9 [ 101.731001][ T6108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.731027][ T6108] RSP: 002b:00007f0d0f791038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 101.731054][ T6108] RAX: ffffffffffffffda RBX: 00007f0d11be6270 RCX: 00007f0d1198f7c9 [ 101.731078][ T6108] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 101.731094][ T6108] RBP: 00007f0d11a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.731111][ T6108] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 101.731135][ T6108] R13: 00007f0d11be6308 R14: 00007f0d11be6270 R15: 00007ffc320f8458 [ 101.731175][ T6108] [ 102.283551][ T6110] FAULT_INJECTION: forcing a failure. [ 102.283551][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.349547][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) [ 102.349576][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.349584][ T6110] Call Trace: [ 102.349589][ T6110] [ 102.349595][ T6110] dump_stack_lvl+0x16c/0x1f0 [ 102.349618][ T6110] should_fail_ex+0x512/0x640 [ 102.349643][ T6110] _copy_from_user+0x2e/0xd0 [ 102.349665][ T6110] get_timespec64+0x8b/0x1b0 [ 102.349680][ T6110] ? __pfx_get_timespec64+0x10/0x10 [ 102.349692][ T6110] ? ktime_get+0x200/0x310 [ 102.349710][ T6110] __x64_sys_futex+0x288/0x4c0 [ 102.349729][ T6110] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.349744][ T6110] ? xfd_validate_state+0x61/0x180 [ 102.349764][ T6110] do_syscall_64+0xcd/0xf80 [ 102.349782][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.349797][ T6110] RIP: 0033:0x7f389cd8f7c9 [ 102.349809][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.349822][ T6110] RSP: 002b:00007ffd66f06598 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.349836][ T6110] RAX: ffffffffffffffda RBX: 0000000000018f62 RCX: 00007f389cd8f7c9 [ 102.349846][ T6110] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f389cfe5fac [ 102.349860][ T6110] RBP: 0000000000000032 R08: 00007f389dbe9000 R09: 0000000866f0688f [ 102.349878][ T6110] R10: 00007ffd66f06690 R11: 0000000000000246 R12: 00007f389cfe5fac [ 102.349887][ T6110] R13: 00007ffd66f06690 R14: 0000000000018f94 R15: 00007ffd66f066b0 [ 102.349905][ T6110] [ 103.516518][ T6122] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 104.313917][ T6132] NFSD: Failed to start, no listeners configured. [ 106.834294][ T6189] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.013445][ T6190] could not allocate digest TFM handle [ 107.103349][ T6204] netlink: 146 bytes leftover after parsing attributes in process `syz.1.42'. [ 107.215020][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 108.369617][ T6237] binder: 6228:6237 ioctl c00c6211 0 returned -14 [ 108.778469][ T6242] zswap: compressor not available [ 110.030266][ T6287] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 110.163391][ T6272] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.675513][ T6281] zswap: compressor 000 not available [ 112.314959][ T6321] ALSA: mixer_oss: invalid OSS volume '0' [ 112.370944][ T6321] ALSA: mixer_oss: invalid OSS volume 'PHONET' [ 112.431034][ T6321] ALSA: mixer_oss: invalid OSS volume 'L2TP/IPv6' [ 114.452623][ T6374] delete_channel: no stack [ 115.188591][ T6382] [ 115.190996][ T6382] ====================================================== [ 115.198030][ T6382] WARNING: possible circular locking dependency detected [ 115.205064][ T6382] syzkaller #0 Not tainted [ 115.209492][ T6382] ------------------------------------------------------ [ 115.216692][ T6382] syz.3.66/6382 is trying to acquire lock: [ 115.222481][ T6382] ffff888079bd16d8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 115.234077][ T6382] [ 115.234077][ T6382] but task is already holding lock: [ 115.241435][ T6382] ffff888079bd0260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 115.250442][ T6382] [ 115.250442][ T6382] which lock already depends on the new lock. [ 115.250442][ T6382] [ 115.260899][ T6382] [ 115.260899][ T6382] the existing dependency chain (in reverse order) is: [ 115.269937][ T6382] [ 115.269937][ T6382] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 115.277663][ T6382] lock_sock_nested+0x41/0xf0 [ 115.282852][ T6382] smc_listen_out+0x202/0x4a0 [ 115.288047][ T6382] smc_listen_work+0x5a3/0x50b0 [ 115.293407][ T6382] process_one_work+0x9ba/0x1b20 [ 115.298897][ T6382] worker_thread+0x6c8/0xf10 [ 115.304258][ T6382] kthread+0x3c5/0x780 [ 115.308832][ T6382] ret_from_fork+0x983/0xb10 [ 115.313924][ T6382] ret_from_fork_asm+0x1a/0x30 [ 115.319197][ T6382] [ 115.319197][ T6382] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 115.329346][ T6382] __lock_acquire+0x1669/0x2890 [ 115.334717][ T6382] lock_acquire+0x179/0x330 [ 115.339742][ T6382] __flush_work+0x4e4/0xcc0 [ 115.344764][ T6382] cancel_work_sync+0xd1/0xf0 [ 115.349987][ T6382] smc_clcsock_release+0x5f/0xe0 [ 115.355437][ T6382] __smc_release+0x5c2/0x880 [ 115.360540][ T6382] smc_close_non_accepted+0xda/0x200 [ 115.366332][ T6382] smc_close_active+0xc3c/0x1070 [ 115.371780][ T6382] __smc_release+0x634/0x880 [ 115.376974][ T6382] smc_release+0x1fc/0x620 [ 115.381895][ T6382] __sock_release+0xb3/0x270 [ 115.386990][ T6382] sock_close+0x1c/0x30 [ 115.391684][ T6382] __fput+0x402/0xb70 [ 115.396184][ T6382] task_work_run+0x150/0x240 [ 115.401278][ T6382] exit_to_user_mode_loop+0xfb/0x540 [ 115.407073][ T6382] do_syscall_64+0x4ee/0xf80 [ 115.412171][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.418570][ T6382] [ 115.418570][ T6382] other info that might help us debug this: [ 115.418570][ T6382] [ 115.428873][ T6382] Possible unsafe locking scenario: [ 115.428873][ T6382] [ 115.436430][ T6382] CPU0 CPU1 [ 115.441891][ T6382] ---- ---- [ 115.447264][ T6382] lock(sk_lock-AF_SMC/1); [ 115.451763][ T6382] lock((work_completion)(&new_smc->smc_listen_work)); [ 115.461205][ T6382] lock(sk_lock-AF_SMC/1); [ 115.468308][ T6382] lock((work_completion)(&new_smc->smc_listen_work)); [ 115.475421][ T6382] [ 115.475421][ T6382] *** DEADLOCK *** [ 115.475421][ T6382] [ 115.483661][ T6382] 3 locks held by syz.3.66/6382: [ 115.488576][ T6382] #0: ffff88807669ccc8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 115.499100][ T6382] #1: ffff888079bd0260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 115.508490][ T6382] #2: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 115.517612][ T6382] [ 115.517612][ T6382] stack backtrace: [ 115.523480][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 115.523498][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.523507][ T6382] Call Trace: [ 115.523514][ T6382] [ 115.523520][ T6382] dump_stack_lvl+0x116/0x1f0 [ 115.523541][ T6382] print_circular_bug+0x275/0x340 [ 115.523563][ T6382] check_noncircular+0x146/0x160 [ 115.523586][ T6382] __lock_acquire+0x1669/0x2890 [ 115.523599][ T6382] ? __debug_object_init+0x2de/0x3d0 [ 115.523619][ T6382] lock_acquire+0x179/0x330 [ 115.523631][ T6382] ? __flush_work+0x4d0/0xcc0 [ 115.523647][ T6382] ? mark_held_locks+0x49/0x80 [ 115.523659][ T6382] ? __flush_work+0x4d0/0xcc0 [ 115.523675][ T6382] __flush_work+0x4e4/0xcc0 [ 115.523689][ T6382] ? __flush_work+0x4d0/0xcc0 [ 115.523706][ T6382] ? __pfx___flush_work+0x10/0x10 [ 115.523722][ T6382] ? __pfx_wq_barrier_func+0x10/0x10 [ 115.523744][ T6382] ? do_raw_spin_lock+0x12c/0x2b0 [ 115.523759][ T6382] ? __pfx___might_resched+0x10/0x10 [ 115.523779][ T6382] cancel_work_sync+0xd1/0xf0 [ 115.523797][ T6382] smc_clcsock_release+0x5f/0xe0 [ 115.523812][ T6382] __smc_release+0x5c2/0x880 [ 115.523825][ T6382] ? __pfx_sock_def_readable+0x10/0x10 [ 115.523846][ T6382] smc_close_non_accepted+0xda/0x200 [ 115.523861][ T6382] smc_close_active+0xc3c/0x1070 [ 115.523879][ T6382] __smc_release+0x634/0x880 [ 115.523892][ T6382] smc_release+0x1fc/0x620 [ 115.523903][ T6382] ? kmem_cache_free+0xfa/0x770 [ 115.523921][ T6382] __sock_release+0xb3/0x270 [ 115.523936][ T6382] ? __pfx_sock_close+0x10/0x10 [ 115.523952][ T6382] sock_close+0x1c/0x30 [ 115.523965][ T6382] __fput+0x402/0xb70 [ 115.523979][ T6382] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.523994][ T6382] task_work_run+0x150/0x240 [ 115.524009][ T6382] ? __pfx_task_work_run+0x10/0x10 [ 115.524023][ T6382] ? __do_sys_close_range+0x278/0x730 [ 115.524045][ T6382] exit_to_user_mode_loop+0xfb/0x540 [ 115.524064][ T6382] do_syscall_64+0x4ee/0xf80 [ 115.524083][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.524097][ T6382] RIP: 0033:0x7f01dcf8f7c9 [ 115.524110][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.524123][ T6382] RSP: 002b:00007ffd3ff1f328 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 115.524136][ T6382] RAX: 0000000000000000 RBX: 000000000001c19f RCX: 00007f01dcf8f7c9 [ 115.524145][ T6382] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 115.524153][ T6382] RBP: 00007f01dd1e7da0 R08: 0000000000000001 R09: 000000113ff1f61f [ 115.524161][ T6382] R10: 0000001b30420000 R11: 0000000000000246 R12: 00007f01dd1e5fac [ 115.524170][ T6382] R13: 00007f01dd1e5fa0 R14: ffffffffffffffff R15: 00007ffd3ff1f440 [ 115.524183][ T6382]