last executing test programs: 2m55.119163319s ago: executing program 1 (id=335): ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000000)={0xffffffffffffffff, 0x6}) r1 = fcntl$auto_F_RDLCK(r0, 0x4, 0x0) mmap$auto(0x8000000001, 0x1, 0xde, 0x8000000000000eb3, r1, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000032c0)='\xc4!\x00', &(0x7f0000003300)=0x1ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) utimes$auto(0x0, 0xfffffffffffffffd) 2m51.681383321s ago: executing program 1 (id=352): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x5, 0x6, 0x0, 0x4, 0xfffffffffffffffd) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x806124, 0x8) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x2}, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x7, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x1, 0x106) setuid$auto(0xe) sendmsg$auto_NBD_CMD_CONNECT(r2, 0x0, 0x20000000) setsockopt$auto(r2, 0x6, 0xd, 0x0, 0x6) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000100), 0x400200, 0x0) getsockopt$auto_SO_REUSEPORT(r3, 0x7, 0xf, &(0x7f0000000240)='\xd0S\xdb\xca^h\x10', &(0x7f0000000180)=0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r5 = socket(0x2, 0x1, 0x0) bind$auto(r5, 0x0, 0x6a) listen$auto(0x3, 0x81) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 2m50.439106126s ago: executing program 1 (id=360): mmap$auto(0x0, 0x2020009, 0x4000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0xa, 0x5) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x4) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r2, 0x800064b9, 0x1e6) r3 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000010c0), 0x101000, 0x0) nanosleep$auto(&(0x7f0000000280)={0x2, 0x1}, &(0x7f00000002c0)={0xf2, 0x6}) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r6 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2$auto(r6, &(0x7f00000003c0)={0x0, 0x5}, 0x8000000000000004, 0xffffffffffffffff, 0x9, 0xb) getsockopt$auto(0x3, 0x200000000001, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0xdd, 0x0, [{0x259, 0x4, 0x20000003}]}) write$auto(r0, 0x0, 0x30) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000080)="341a0200a1b135c6b74e4f2a6338af5385ac91300e5e6cb974ba5f794c283d0ef72a", 0x605c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 2m49.261732308s ago: executing program 1 (id=368): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) (async) r0 = socket(0x10, 0x2, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000640), r4) sendmsg$auto_IPVS_CMD_ZERO(r4, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000004240)={0x18, r5, 0x1afd1dc61447ea27, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x128, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_AUTH_DATA={0xe7, 0x9c, "70bf35ebf54db5ef12cfec11fb86a4a5b70e150919c0bce63a4008a84b26237ada8b546b987d62e7dc3d3c3fe5902990218551ae6bfcd6b56a67c2a7ad24e8f801683959d8eb0b86ca7478003f59a52bd768b7a37003039ac190cf6cb8877dc2cd3a130b9661a0896eba52aed4495d744bc5728a200d6d7823088f9a2359b3d108d0a58d73be9e34bb4484d3435d67035e57e553ec1f39be26702b2c8d9a47f7f89d37d7c973fc9825ee6c6720896960fd55f48333a711020409db2bb4cb5912850268206db965c42e306848224a45f4c8617a992c19799d0d9e15562097344e8d643e"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x44}, @NL80211_ATTR_STA_WME={0x24, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x60}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000084}, 0x840) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) 2m49.038313598s ago: executing program 1 (id=370): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20000, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0xfffffffffffffffe, 0x4020005, 0x4, 0x11, 0x401, 0x8000) socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirty_bytes\x00', 0x8a042, 0x0) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgid(r5) waitid$auto_P_PGID(0x2, r6, 0x0, 0x6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf251700000028003880240000801e0094007a450fc0c03f8e7b5826b5d627c084be296233ebd5170fd0f3b200002d077329efb0704067154913b383d4ed6f6b2aeda4664be79b5fb4dbf65dd81d1ff82b2f7d6a6161326f62e4e8f843d15c4123aa4b9966c9a5932b539356e256c62a4ef4828c44ee9558a2fbefbe7768f4cf9f91a424d0ed437744422b80f2bd9c058e965bb9aa5cb17edc633abbf717591d953fafc89985ea40a167244ee183b2ec828c3e5ff194ab6a07d09071f01f"], 0x3c}, 0x1, 0x0, 0x0, 0x4404}, 0x0) r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c6aed270c6ebc09caf038b721f60180701ee44b1eb1daa430db5cfc629376f5ffe0c81f7531bb0e283f81d664e4dda391bde01b0309425b2931611852a26c50d5334d181e19e9e1775336a8721c8db1020ee3688b97b13dec9299c85274769010fa4de3588ea999364f334550003d957e44d275d08a4d906c0e4bfaf19b2932ace8091d398ced8492db0000", @ANYRES16=r9, @ANYBLOB="000127bd7000ffdbdf250a0000000800050000000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) write$auto(r2, &(0x7f00000005c0)='($}-)#@\x00/\x1b\xd5RZ\xf8\xaa\xcb\xd1\x90`E[\xddJ\xc0\xe1\x82@\a[\xa0e\a\x04\x13]H\x9d\xbb9GR=\x1f\xd5N\x95\xd5\x8aZ\xc2\x81S\x83\xe4{\x10\x7f\xee`\x96K\xad\x1e(\xeb\x93y\n\x17\x82\xe4\x88\xd6\x19\xfaH\xa3w\f\xfcb\xb0d\x8c\x91;\xd1D\xcd#\x15e\xadP\b\xf5%te\x14:iF\xae\x99\xac\xe6\xd8\xd445\xb4\xeeA\xcfv\x90\xedr\xf1\x7fY\xe7q7\xe1\xde0C\xa8\xe7\x13\x129\\@hx\xc9x\x88\xcb\x90\x1d\xba@?\xf2I\xb2\xbac\'(v\xafas\xd3-~\t\x16>\f\xdbJ\x8eJ\x1b\xa2\x0e5\xe2\xca_\x96<\xac\v\xd3\xe82\xbd\xfe\x99\xb7/F\xc6Z\xb1P\x02\x85nb\xb3\xd1\xc5Q\x9e\xa4\xfan\xac\xc7$\xca\x19jr\xe9\xef\xc1!\xc1\x95)S\x05\xbe\x9a\xc7\n\x10F\x8f|\x8b\n\x83\xd7\v\xcf\xef\xfcy-\x16\xee\x97}\a\bZ\x9fC\\\xf7]\xfa\xf5\xfc\xbaIm!\xb1\x8b92E\xf7\x1c\a\xe0\xa3\\G\x0ez\tc\x86\x8cj-\x97\xbcwJ\xafXyF\x8f\xa9\x04\xb4\xba\xea\xb5\xab\xcc#\xdd\xe9&\xc1.Q\x02\xfc\xb1\x81\x18\x12\x19w\xa3\xd3\xb2Z\xd5\x17\xc1\":A9c\xd1\x17\xfd\x9b\xb8\x88;@\x8d\xe9\x00\xc9\x18\xe4>5\xa3=', 0x3) sendfile$auto(r1, r1, 0x0, 0x48) write$auto(0x3, 0x0, 0xfdef) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) getsockopt$auto(r0, 0x6, 0xf, 0x0, &(0x7f0000000100)=0x14) mmap$auto(0x0, 0x4, 0x9c07, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(r4, r4, 0xea5) socket(0x2, 0x1, 0x106) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0x0, 0xdf) socket(0x2, 0x801, 0x106) 2m48.577987348s ago: executing program 1 (id=372): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) write$auto(r1, 0x0, 0x0) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x2e000, 0x0) 2m33.428362199s ago: executing program 32 (id=372): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) write$auto(r1, 0x0, 0x0) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x2e000, 0x0) 2m31.289274s ago: executing program 0 (id=473): socket(0x27, 0x5, 0xfffffff7) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x40, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x2, 0x0) mmap$auto(0x201, 0x2020005, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) mbind$auto(0xfffffffffffffffe, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/ep_81/power/runtime_suspended_time\x00', 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4611, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80180, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m30.209829909s ago: executing program 0 (id=478): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'geneve1\x00'}) sendmsg$auto_BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ALGO_NAME={0x7, 0x2, '&!*'}, @BATADV_ATTR_TT_ADDRESS={0xa, 0x10, @random="e9d0b212f78f"}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x9}, @BATADV_ATTR_BLA_OWN={0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @random="daeaf46fffbd"}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x14, r6, 0xb11, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xc0}) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) sendfile$auto(r0, r1, &(0x7f0000000180)=0x20000005, 0xc2d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103b02, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfdef) 2m29.157059045s ago: executing program 0 (id=479): unshare$auto(0x40000080) (async) lstat$auto(0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0x2c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4800) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r3, 0x705, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 2m28.754453188s ago: executing program 0 (id=484): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8000, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x9, 0x3, 0x0, @stream_id=0x101, 0x7, 0x476, 0x0}) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/loginuid\x00', 0x10000, 0x0) ioctl$auto(r3, 0xae60, r2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/036/001\x00', 0x45a903, 0x0) ioctl$auto_USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000001c0)={0x0, 0x80805513, 0x0}) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x2, &(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)="25e8ed11967fbf", 0x1) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r8, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r7) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r10, &(0x7f0000000e80)=""/199, 0xc7) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r6, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000c63d129f476bb61569036ca42b879f4253d58c4be2fca1060e90db2a3207a57fa2a87bae581d83412c17871356d188e86eb47e", @ANYRES16=r9, @ANYBLOB="3f0026bd7000fcdbdf6501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) r11 = epoll_create$auto(0x3b) epoll_ctl$auto(r11, 0x1, r5, 0x0) connect$auto(0x3, 0x0, 0x54) r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r12, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 2m28.411702318s ago: executing program 0 (id=487): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x40000, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0xffffffffffffffff) setresuid$auto(0x2, 0x7, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m28.219631698s ago: executing program 0 (id=488): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1e, 0x1, 0x0, 0x4, 0x3) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff00004ece4e4bbfaa20a6560cde57768e7dd23990796817b8ca63ecc0956c3a6bb9ad3c19c36d4ec1c95ea8d8924aae34c83d7a438daac5f5f3846606b704df081b7f53e720690be79edeeaca5269fa5bd9de8c69b9e0"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) close_range$auto(r1, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0x1d, 0x2, 0x6) getsockopt$auto(0x6, 0x40000000029, 0x31, 0xfffffffffffffffe, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty18\x00', 0x40001, 0x0) ioctl$auto(0x3, 0x5411, r0) 2m13.157990037s ago: executing program 33 (id=488): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1e, 0x1, 0x0, 0x4, 0x3) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff00004ece4e4bbfaa20a6560cde57768e7dd23990796817b8ca63ecc0956c3a6bb9ad3c19c36d4ec1c95ea8d8924aae34c83d7a438daac5f5f3846606b704df081b7f53e720690be79edeeaca5269fa5bd9de8c69b9e0"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) close_range$auto(r1, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0x1d, 0x2, 0x6) getsockopt$auto(0x6, 0x40000000029, 0x31, 0xfffffffffffffffe, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty18\x00', 0x40001, 0x0) ioctl$auto(0x3, 0x5411, r0) 2m8.129255689s ago: executing program 4 (id=599): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x10800, 0x0) ioctl$auto_BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000080)={@raw=0xc61c, 0x7, 0x25, @unused, @subvolid=0x8}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)='7', 0x1) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001940)={0x18, 0x0, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) r5 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/flush\x00', 0x80a02, 0x0) write$auto_aoe_fops_aoechr(r5, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x200000000df, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) r6 = epoll_create$auto(0x3a) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) r7 = socket(0x2, 0x1, 0x0) getsockopt$auto(r7, 0x800, 0x9, 0x0, &(0x7f0000000040)=0x2000008) 2m7.645128775s ago: executing program 4 (id=600): unshare$auto(0xffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x18001, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0xf0b4, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r1], 0x144}}, 0x24000010) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x80000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xd0d00, 0x2b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) fgetxattr$auto(r2, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'}) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=@test={0xffffffffffffffff, 0x3, 0xc2fb, 0x80, 0x8, 0x6, 0x4, 0x4, 0x5, 0xfffffffd, 0x8, 0x746c, 0x2, 0xd287, 0x7}, 0x804) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101181, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000480)='\x03W\x96l\x15\x00\x00\x00\x00\x1d\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x1f\xcfq<\x8f\x18\xb0J\xc0@\x9c\x06\x97\f\x14\x95\x05\xa2\x8fP\xb0?\xeb\n\x82\xb7_*0 \a\x00\xd1Hp\xc9m-h\a\xf4\xff\x8c\x99\xdf\xf1\x80 \xa5\x80\xbb\xfd\x11w\xab\xe3\x16b\x9c\xcd\xa4]\xfa\x95x\xfei\'\xd7Y$\xf7\nR\xfbt\xb8\xf4@\xb9\xf3Y\xb5\xda\xdb\x11+\xf3\xcf\xd1\xe3\b\x95\x1b\xa65sGeab\xa2\xda/G\xa3\xbb\xaf\x05F\xdes\xe7T{\xe4HiyU\xa5@\xdb\xeb\xb5\'\x94\x8e@\xe6\xa1\xf5\xac\xecN\xdfw\xf9\x9f\xe6\xa2\xe3t}\xd5\xdcB\xf1sy\x80x\x19\x967 9h\x9b', 0x100000002, 0x1000100000003) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x201, 0x6, 0x74, 0x6, 0x64, 0xa, 0x7, 0x8000000008, 0x80000000009, 0x8, 0x81000003, 0x0, 0x10004, 0x9, 0x1, 0xffffffffffffffff]}, 0x0) 2m7.180081511s ago: executing program 4 (id=611): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x220400, 0x0) ioctl$auto_SOUND_PCM_READ_FILTER(r0, 0x80045007, &(0x7f0000000100)) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x1) r2 = socketcall$auto(0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40101}, 0x40d1) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x220400, 0x0) (async) ioctl$auto_SOUND_PCM_READ_FILTER(r0, 0x80045007, &(0x7f0000000100)) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x1) (async) socketcall$auto(0x8000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae41, r2) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40101}, 0x40d1) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) (async) close_range$auto(0x2, 0x8, 0x0) (async) 2m7.012802426s ago: executing program 4 (id=605): socket(0x1e, 0x1, 0x0) open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310) r0 = socket(0x2b, 0x80004, 0x7) r1 = prctl$auto(0x80021, 0x0, 0x0, 0x0, 0x6) setsockopt$auto(r0, 0x29, 0x7, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) alarm$auto(0x4) mmap$auto(0x8000000000000000, 0x400008, 0x4, 0x18, r0, 0x2) write$auto(0x1, 0x0, 0x80000000) r2 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r3, r2, 0x5, 0x8) close_range$auto(0x2, 0x8, 0xf96e) connect$auto(r1, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2710, @host}, 0x5b) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x7f, 0xfffffffffffefffd, 0x17) pkey_free$auto(0xfffffffd) bpf$auto(0x0, &(0x7f00000001c0)=@link_detach={r4}, 0x10) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r5, 0x80044dff, &(0x7f0000000300)="04069dd9f9b5f661a5c34458b227a77e49cccce4c7feec5b5c9a7bd256985cd1f73e538addd24e492c95e9ae7fd9c0ea460800b8e1372173f1db3f038e42d0797b2a8eb6649683cd8eb3cfa1b8aba92fd8b6d25350c6e03b430715c3485c6245a3145fcba2d6e0e404a9e8000f6c721778bfb06c5925bb27f96b17058ea727") 2m6.324280087s ago: executing program 4 (id=610): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x101, 0x103) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) socket(0x11, 0x80003, 0x300) r0 = socket(0x1e, 0x805, 0x0) connect$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) read$auto(0x3, 0x0, 0xf3c) 2m6.096092666s ago: executing program 4 (id=613): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x7, &(0x7f0000000000)={0x102, 0x585, 0x20000000000, 0x28, "100832c8acae39f049d50ad8eb3eea1cbb950cfb17e4c1e5adbff7117e987f031501a55d4ab94486"}, 0x20, 0x12000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0) read$auto_force_suspend_fops_hci_vhci(r0, 0x0, 0x0) r1 = fanotify_init$auto(0x200, 0x1) clock_nanosleep$auto(0x81, 0x0, &(0x7f0000000140)={0x200, 0x3}, &(0x7f0000000180)={0x7072, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) mknod$auto(&(0x7f0000000100)='./file0\x00', 0xf42, 0xb) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x128, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x7, 0x1, '.}\x00'}, @NFSD_A_POOL_MODE_MODE={0x6, 0x1, '*\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000080}, 0x12) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 1m50.737679134s ago: executing program 34 (id=613): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x7, &(0x7f0000000000)={0x102, 0x585, 0x20000000000, 0x28, "100832c8acae39f049d50ad8eb3eea1cbb950cfb17e4c1e5adbff7117e987f031501a55d4ab94486"}, 0x20, 0x12000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0) read$auto_force_suspend_fops_hci_vhci(r0, 0x0, 0x0) r1 = fanotify_init$auto(0x200, 0x1) clock_nanosleep$auto(0x81, 0x0, &(0x7f0000000140)={0x200, 0x3}, &(0x7f0000000180)={0x7072, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) mknod$auto(&(0x7f0000000100)='./file0\x00', 0xf42, 0xb) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x128, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}, @NFSD_A_POOL_MODE_MODE={0x7, 0x1, '.}\x00'}, @NFSD_A_POOL_MODE_MODE={0x6, 0x1, '*\x00'}, @NFSD_A_POOL_MODE_MODE={0x33, 0x1, '/sys/kernel/debug/bluetooth/hci1/force_suspend\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000080}, 0x12) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 1m7.100225265s ago: executing program 2 (id=807): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0xe3a3, 0x3e, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)="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") (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$auto_SO_RCVBUF(r0, 0x6, 0x8, &(0x7f0000000100)='/sys/module/apparmor/parameters/debug\x00', 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="c13982998fc870d4c898eaced87c511c3fe5b818ef3f70e94ef94ed1574419c6070e7b4b3948147fb7ba0ed4f1db7830d00de9ec425baf01057cd2ea887d6aea9697b033a3c0bd0c74d67f8ec90f7adc38b0daefaa672aff3cf428383ff7d722315abaa66ab76f15bd6bfce9f4cc08325f35f096a67020eff431ad0adb95c08e27fb7ce3ae7cb03ae245c5f5a866771c75be6bb5da0f5c30ce0726fa0af62ccda26f12601bc8f341add24f5de76d2c4212c3d99b55328143f6c49af8b746356a17fd4e9c11e2c2a917c8210397c6e1be84669aa3b3f4098185a5fa176d023712b95d896e9bb3", @ANYRES32=0x0, @ANYRESOCT=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x24000044) (async, rerun: 32) recvmmsg$auto(r2, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x4, 0x0, 0x200002, 0x80000000}, 0x6}, 0xffffeff9, 0x10, 0x0) (async, rerun: 32) ioctl$auto(r1, 0x89f0, 0x24) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x5, 0x7) (async, rerun: 64) io_uring_setup$auto(0x2, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket(0xa, 0x5, 0x0) (async) fanotify_init$auto(0x5, 0x0) ioctl$auto(0x3, 0xc040564a, 0x38) (async) open(0x0, 0x61e7c2, 0x100) (async) socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x7fffffe, 0x0, 0x5) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) bpf$auto(0xb, &(0x7f0000000000)=@batch={0xffffffffffff2017, 0xfffffffffffffff9, 0xffffffffffffff01, 0x5, 0x4, r2, 0x5a266c04, 0xfffffffffffff001}, 0x7) (rerun: 64) 1m3.97841365s ago: executing program 2 (id=818): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x7f, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_settime$auto(0x0, 0x7ff, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clock_getres$auto(0x6a1, &(0x7f0000000080)={0x80000001, 0x4}) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x8) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) 59.102718941s ago: executing program 2 (id=828): mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1c\x00', 0x430442, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r1, 0xc2604110, 0x0) 58.556349908s ago: executing program 2 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = wait4$auto(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x10, &(0x7f0000000080)={{0x6, 0x6}, {0x8, 0x7fffffffffffffff}, 0x9de, 0x6, 0xfffffffffffffff8, 0xff, 0x4, 0xffffffffffffffff, 0x7b, 0x6069, 0x4, 0x9, 0xffffffff7fffffff, 0x8001, 0x1ff, 0x2}) r2 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/x86/topo/cpus/1\x00', 0x100, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x3c8, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x800}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffffffff}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xffff}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x36e, 0x19, 0x0, 0x1, [@nested={0x2cf, 0x5f, 0x0, 0x1, [@nested={0x4, 0x6a}, @generic="6254c57e6cdad14268deb6bfaae123bffd75153fd2239280355f7423cf6baa9c025bcd233ab073032a311131d66d459a75db9bd3101673e8ed5967772ebb473243554abbedd4666931124363079e2e7b3568af7eafb4abc5aad9962f473704003c3e3cfcf4710fa1f7c1348e397cec2db0d7e8a45c093a680ae6371148c0e589268ea4dd5bceb89e49c0b0785e9fc8f9744ebb03c9d40f36e7", @generic="488693a9363235f5c9bba9181a98bebc60c24737902b6bb82f4079f344750881fdc26a913cebaf127df1ef470fa907c7014a5166bfe14255802f5dfd1796ef37da261ec89603f71991cd4d6c562daea4ecef77f3c30c8cb6ed97801847d1b6a72f70666cb0e3fdf39032a84cdabc37f6f802ef5a0174c48350bbf1a64299c0eef26864054009729a78aa69e30c543932f625da39f2c73366e1698704923f61235184a1fd45ca79aee9b917efb286dca604a9defde1f54e518e392c6c8a026f868e8eec793fcbe1b5bd7866afaf21", @typed={0xe9, 0x7, 0x0, 0x0, @binary="4df8385b6dd912d4af344cd65578fa403c90ec7d0320ec3eb13f66bce80028249183cae83fffc2118fd868ae0f4b69fc461d2d44691e5642ddcb56c49897e926ebbd63ff89ed2b8c6aa12f06ef1bee39489b0e5cde3f2ea2cf18285a65d08e1beb849e774862ad1785f66800fb489c01820a61707ddddea6a6b03bbc8c946d74aa95266cdb339e599c0788e2704262832dd4009b1d3a51d76f28590500d5147fe19a4b7063e00e25c987cebfe81c71f385b01920ed6fcd07d3429fd0a675674fb57817f01d851743de8def39bd2727bc82617297226736b76f6ddbaf28665e1ba727134240"}, @generic="7b954a41c11967b24eeaef540bb4d84ff99c0e2344759b700b315ceb5c4f0626611aa3231cbcba3ed2d04874e5e5c6a835c4afe0726ef8d81ec1586ba82c85a5cfeefb448b2c2fb1451da8ae41c043842e59e9e298447d222d81a75a53374eda", @typed={0x8, 0x87, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x6c}, @typed={0x8, 0xb3, 0x0, 0x0, @fd=r2}]}, @generic="b51729c4761d06bd2e0b2fb481cbb78ef361ef845e423206f048563b9b75aafef98f513db98d2bf35905466d405c3b189ac223ce9edd97e74b8b867718d6d600b7a7bc36", @generic="5af06aca1abb1c2a85e98963ff38aa34de7a", @nested={0x41, 0xed, 0x0, 0x1, [@generic="4d08a740187098c3176ac2348603354a31110b178f916d8685b86fac944b645ab9c7cc4a118a43738c97aea8ad89490816ea50b5c988774d0729fef2ef"]}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x44}, 0x20004845) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/gid_map\x00', 0x200e00, 0x0) writev$auto(r0, &(0x7f0000000740)={&(0x7f0000000640)="a16210ca3e5183aed5b9587e4ae2130ba3ec8de51999ddd452a1a616fe9e647fef5f1a7a4e52dae0b1933606222e2291e0cea2b9275cfb3432232fe9a86d40fece528b932f153c6edf2cf34b521b1687a8e0d77ea24e523190aa4d06fd466732ae8a5a1628a62b63e997e1475c9bb18331cc090619d9f43e3c4e32464301bf05accfc0df7e38160cb72df757f02bc3fcd3ae6b9460dfa71a4cab6b0ee0f17e8587698c47dd2317d81af13348b40b5877413c89913445f068f10e786100cce8fa46aaa5ceaf8451293e7abde14cb6", 0x8000000000000000}, 0x0) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000007c0), r0) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv6/conf/all/temp_prefered_lft\x00', 0x40, 0x0) fcntl$auto_F_SETPIPE_SZ(r2, 0x407, 0xfa) r4 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0) write$auto_set_tracer_fops_trace(r4, &(0x7f0000000940)="41e36de3ed3573db30ea027a70bf1f8407789bd2a6d2d7eb9b9b7bdcc5f99fcc40d0f0d9079d9e7668cb6505fd8397fa7bc9789c7f8138378c58faa0227abed80e8954c64558eab1f672313d2fe9832f220276b82a43535a6b78f59e5e3f8cff85e04e3ecd038d391ed572325d670e7abea9efa19b4256dc8fde47aef4cdf1896c3557bf7bc8c6888dceaa436aaa33defba8fbb1c70663015f79a60f2185df3e36495d0db1060c2cee023684c7394e3e72e01887097797324f606642e5", 0xbd) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dsp\x00', 0x6000, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000a40)="2348fe4f6b9abd78b0f0e8b45f88a4db04500e27271c1a118ed378737f07bd8b2159fc70ee429cda6932ddd0ea059b1bdeb3879c9041f0b9263b6c8056ef3c8def0856d9b9") r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'rose0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0x1e, 0xba, "1115ae8cd28253932005304199c19e2680f87568332ae8c9e520"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x40}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40841}, 0x4000000) r8 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000c80), 0x81e45fca61037a8f, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/cuse\x00', 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/devices/platform/vivid.0/video4linux/v4l-touch9/dev\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xfc}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, "103680347facf035"}, @NL80211_ATTR_MPATH_NEXT_HOP={0xbe, 0x1a, "a826fb19e21c94efa58a365be4016239378985bdcb2125f71ff32de3ab6a73ecb7826057b62d6cdcf0c9f88ad03533944b1d2639f3dd1bdc353c7beb7a9741a8041ac1d083bf8bc9f550a805c2d35efbb2e79865c00c1912b09635ad912dac5bb4f43f32dda184af647dc7d242322e2c15fbce1eea703052cc75835e502868e8e3a54e3152ce33d9edf698a1d91cd42c3d1f7c6d695647074162f89bdeda3d751d6ad87c4c51febd99d87b42e351a2a7d627912b7c7b67712e51"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0xe810) writev$auto(r5, &(0x7f0000001000)={&(0x7f0000000f00)="da274f564062a7816dbddadf9b2d45011e34940750cc3a177514681bd4b9b5cf92559c9bad30ab905755efa4d512f2b89b9b0b2b933bd1e16b48fbb4dc71a99cc336845b197db901e0aaee9570165ba0f6c3536cf7c117722bc289e7ca869dd1de448c24c3a18450bd6cc753abae8364ceeab2919cd6e461633b01c1d81d75f9c388a74b2d7e8fdc80cf04b080a81cd44f2b09f1f1f2f67cd3b85c93d0ad8a6e47b3f71e7bf535d4055a054329235d5050efaee39ccc79676f2a04ddee0aef8e4f05434b473b312b40ed6427bccbceae0163cfe7572f61d0502f2dacd0b12b92c1851800e0ecb35a18319d4e", 0x5}, 0x8) r9 = openat$auto(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x6, 0x2) syz_clone3(&(0x7f0000001280)={0x204000200, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0), {0x31}, &(0x7f0000001100)=""/5, 0x5, &(0x7f0000001140)=""/153, &(0x7f0000001200)=[0x0, r1, r1, r1, r1, r1, r1], 0x7, {r9}}, 0x58) ioctl$auto_SNAPSHOT_FREE_SWAP_PAGES(r9, 0x3309, 0x0) r10 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001340), r9) sendmsg$auto_SMC_NETLINK_DUMP_HS_LIMITATION(r9, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xdc, r10, 0x10, 0x70bd2d, 0x7, {}, "5cd98131f5139e0a625e0f6be5e6d0af482cf0cea8b85e0c4ab0ec741cf0b60e347477bd3ccd2482df1b0819ff169aa9ea571515c46b07ccbe843e42c78c389da7067e8e2b7b645502c3ea531b9780230f17445c2da6eb8d0386d458e4490422d070826a0f697cc010dbd69e191b4650eac39432d58a0ee162598954be40c37b10cfea06eb911f750d57ab26d7c78b042aedd43862ab8b7e15ce28ea0aff4ad5662947d8d304d7000046df09339dfc2be64b645c53baf73f8df373b8646fb70266af2658090e"}, 0xdc}, 0x1, 0x0, 0x0, 0x81}, 0x5000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001540), r11) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r9, &(0x7f0000001b80)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f00000016c0)={0x444, r12, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x42f, 0x18, 0x0, 0x1, [@typed={0x14, 0x116, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @typed={0x4, 0xe9}, @nested={0x16d, 0x5, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x8, 0x21, 0x0, 0x0, @pid=r1}, @generic="b15cef540ac04a456cdfe3c74dea9afc8d5dacf22bcdaf4d6ad101f5981091a37556b3051c4e434878bf294b9333afce0af186cb53cf87eda5398a5cc4d70a6e9434d1feac4cebe08068f0edffb46e4f20964a734f30ba6f350930b8fc42a8b2ef43054f10a4ec6851146cc36b76cbb5fa7b3bebbbfdad4582fdf623f5f63e345b4988e94f344e", @generic="c0e7a0396395dcd00e1898a5ebe127f45308e7bf73c3311964cffa24e814fd90c95d79f6bc5aefa5a4dd672ea15bc57dfc21ec0eaa78d2652f3b6f7fe074d1588d475a5a3437db1225bd9fa60ca668a632f63c144ea30249da2feb4fa716eb177e20945e05b3d79c497fe7a1396ce8671180d1e488312313562b7884de02430122b228c3ddf52eb8da7d808525a04830c936e3e56bbe0ba4a1091fd1b93c50f1a55adae115b473e5d91e1485cb04595496c765af7a00b9cd86b8a0dddd694fffc3de1a059a867f641ed8e93d6c60eed81316c5c63f72"]}, @nested={0x18, 0x95, 0x0, 0x1, [@nested={0x4, 0x36}, @typed={0x8, 0x11b, 0x0, 0x0, @fd=r5}, @typed={0x4, 0x25}, @nested={0x4, 0x112}]}, @generic, @generic="e24c49e00fe671789db3234790a250e82bc8ce43a518cb33cf0ec0427a57f1ca9009693e31769d58fa87563be5baae64ab253764d609277af6f4d805f2ecfc2f834f8622dc1e1824cc6063ef5d529797bcc5defb8c7337a382c23c6f3edb7bdd33cb6e4949e7014cfda373f291e1d783503399421698ba626eeb1d8b6cc3d387f8b4d79f87a76ce838532a721fcffc6a14a97f843d863690ad33fe8d170dc02564b4ede83741cf819f90d7635a4ebf60fa83718c4ce26eb928993483d940d19f61015fc2cdcf250097508548260a86fac92c549f01d4cb1ea72c665cf3ac92e3", @nested={0x13f, 0x13e, 0x0, 0x1, [@generic="255dd2358592d342756c081c2ddd3fb1556b7f08539c863758b596473f27e0fbd73939dc25f4fccf52ebc188419f8b99a50f1453a293843d2054b7eeccbc05c4784d15bf86489d9a7bff87a82ed69b70bc7a9605e488cc41a6173f129bdfba2de740051742c34a53f582e81ef04977edee1cf511b38139ea3118150bb0639734bbd89dca4175e61bae173dbb7d83e7c3ea6e1edeaa68d11d28bd", @typed={0x8, 0x41, 0x0, 0x0, @fd=r8}, @generic="374e1dff72ae325bd9d0b6774f6c6a767f1f40f6483c1f0c4a98fbfa246ed9a65b717289be6066ba04bdec39aebed4cb090a0882466c1dce72712f1f6909c29918b0e0d4ab410813e7aee9332df76bb6474259483624a7904a6fdbb111", @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0xb61}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @typed={0x8, 0x129, 0x0, 0x0, @pid}]}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @generic="3a2b979f9002bd5ae5f3c53b5aaa824adb29919582c48954307e8f49775c1c31bb0f79766da60d361e5be95fcb0e6c88749e7f73fae3bf5ec66cfac25fbcde26dd737eff29ca83a49261dd25455b89f18b216cebfbd381"]}]}, 0x444}, 0x1, 0x0, 0x0, 0x40004}, 0x4008) 57.622306039s ago: executing program 2 (id=836): openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000000)={&(0x7f0000000180), 0x7}, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf250200"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) utime$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0) 57.306232194s ago: executing program 2 (id=838): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) r1 = socket(0x1e, 0x805, 0x0) connect$auto(r1, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) read$auto(0x3, 0x0, 0xf3c) (fail_nth: 1) 48.090467775s ago: executing program 5 (id=866): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000300)=""/247, 0xf7) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mmap$auto(0x200000002, 0x4020009, 0xdf, 0xeb4, 0x401, 0x100000008004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r3, 0x40045702, &(0x7f0000000040)=0x7fffffff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0x1, 0x9, 0x1, 0xa, "00525f000c002566b5dd00"}) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r2) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x40000) mmap$auto(0xfffffffffffffffc, 0x402000b, 0xdf, 0xeb1, r1, 0x5) close_range$auto(0x2, 0xffffffffffffffff, 0x21) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) 47.199690516s ago: executing program 5 (id=869): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000000)="2dc2f4045de01f", 0x7) mount$auto(0x0, 0x0, &(0x7f0000000240)='nfsd\x00', 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvme_core/parameters/iopolicy\x00', 0x2400, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec7\x00', 0x10b101, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0x9, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xfffffffffffffff8, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x774, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x3}, @OVS_VPORT_ATTR_OPTIONS={0x47e, 0x4, 0x0, 0x1, [@nested={0x195, 0xe1, 0x0, 0x1, [@typed={0x14, 0xe8, 0x0, 0x0, @ipv6=@empty}, @generic="160e4401c913507006f538ae19734eebee5d151373b89cffc575c8a975bc0b3994f8437b8ce953929d2684ebcefb6ff7f7d5176350ceac7798be661062f93036eff64ec202993fdadac31818655b8cff138aaa045c6b7f7b231eea6fd71c0970e57e76d4febe9ebd4dcebcf216efbc6bebf52cfc77c025", @generic="fe6ff97532249dc1cbe475f65a1d15957711d9aa82c481bf35877ee1447ff300d23d49f323f3384f2de9e7e0f9bf7fbfc28c60db74327ef12a71bcecbc6ba9aa6f6608535dcbb42e0c3db66ee25e13432c2374da34cbcc7b7dee84489dc28732438a9364cd2e102c4a253c619b68ec4cf255a05ee2c342ff0c7b14c2afd57a42a32dcf0c1625ce996749f520584a044dc6acda9316f07eb6c8edbd51cc4077c67ebdad6bcdc16c88212797d658db38a1133b", @generic="9116c5700782df4f226a325d4b53ed2dd87ed21d86460ea6d35944775208565e19f1c29728dbdac6cb0cd021a76ad27c2e6abb42700aa8105862c9aec065bf31f6bcf6e4", @typed={0xc, 0x6b, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x14d}]}, @generic="fb33ad93df371e0ba287b28ecd58e07a536488c650c52bd7cad373e94b2511ec1bcad3dc403d4a6a86f6d67b2b036dd3b57d8bf672393bc0121d1ad0d05332003fe2c9dc35fdb5a6ae5ed1289b353a71b2fb1952bf1cab2285b5f24b50fe1463434affa66c15c793040c12c729d1c15f5f842ae3b1ab3fd82d94f38484119133be515e9103a8321e4bdda5948bdc4d1d33a31f62afc6009cd7f260b2a98795dcc38cc53ac5fb74b70b56eef504a232612276093bd892a4cc8dc9d549a00eee15637c774a86972d9a72bb0845cd742735c3603b2c4accc1447e3b1bb8bd6b8b80ceb528a6a7d6ce2a72237d70f9c5ee00717026ac53cc4f4ea4", @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@loopback}, @generic="443e64f290ffbcfdcdec6dbafb362307e23e8de1e38a7fafcf074174e31547a2ef7d5930", @generic="1a89729a8e0c075c9de593e617f899d02d3eb09c26eb392f0c934df46d15fee5b5d824fa4a922cb8870854ec1df56ff830dd5ed1b31c7d60cea9153f894e414d2b2af866ecd4892065e786f9a8c2ecd11c71e74f5b55af3f36e8514f383f9e7175bf41ef16eb5f41c0b7da605858ca0cb7ecbc2437f944276b572de1b9b4df01ffed61a3b147660cacb5d1b846a23fdd3739b81053d547f95cd6eb6e6fa8555e599dd0958be4f3474c4f1f364b2bef2381b2086cc2933f022ca7e97a2af4ada8", @generic="82df77e266075cc2020f8a5e07f45076cebefeac9af76cf5168885f7a6f7af8d0ca7f09e92777aa25856b4272797d793b8798a1dde8dda5f6cf89c25fa8a57e060a33d91d6ad622073162688c51adbb89b6447bdd32bafa199ee6549b25d0452187684ad843e3a96e7a66710329248b85c185534b36a16d6accd9749d481f62d23", @typed={0x7a, 0xde, 0x0, 0x0, @binary="6a0c21076b36b1565a7ff7e0138a667c786a5c12e3218b1b68cd5906b8a482397f803a52f43ea4bd9abd13e853109bca0ac52609abd9cf5a7ff919b6a72cf51df82a01a65a766a454c731f73dfa27aa602c3081bea64502c02dcede05afd00a266a6bdeaa078c7aa30d0ece1dbfb83695e9243e362cf"}]}, @OVS_VPORT_ATTR_UPCALL_STATS={0x292, 0xa, 0x0, 0x1, [@generic="3a6da0517cf697833954fc61653571add5112f2809738a8b766f400d03059ee9741d4236253a4162599bbc48177f8b788863c3226079be0958fa4698caf8796bdb2330ffb62eceafb4531d5be6611798f9ebc62f84eab3eb3b9b69b954740e16ea999652fe3eb5f3d1c87d9f8877a6230d007eb672584f793c96a9a3b7905717f8a48838a20712d28940511224dfd937849693a1f943b8b3f7648ac72a83004ca5a80daf0a0cc44b7460a7fb26b9811e34595e4c3fd0d175", @typed={0x8, 0xe5, 0x0, 0x0, @fd=r1}, @nested={0x6e, 0x57, 0x0, 0x1, [@nested={0x4, 0x108}, @nested={0x4, 0x27}, @nested={0x4, 0xdd}, @generic="dc66fedab76426ecf188c74134534e76157e00", @nested={0x4, 0x80}, @generic="03c45da430ee26b4a708744fe50eca407cdeba84e84c5bae7cac5bfc4212eed7c1092d88afa9baf394426faff93a6c2fe4f3b8c035ffe3c0c2bfa521d168a5b3df2e11", @typed={0x4, 0x85}]}, @typed={0x4, 0xc1}, @generic="4b6bd5f53d9fcebbe5933630fd752d0616f5169c54b552a15084e9dcdf99e97feb61c4284b689e51604e2e0640008bdfa70624b68fccb2aaaafa25258fb94989aff78ea28ecab4b17c11bb64950585e0389c13a2084edf4331d1a8d9e9dd9e8f06976b46a7e5438c2ac1", @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@empty}, @typed={0xe7, 0xb8, 0x0, 0x0, @binary="b3cdbb1e4e2e5b3c7e74fee4ffdadbd7dcfe5e139c1f2ad9d8f448ab9f8d31bcb5271d190a5e8245ad4810d0c3a4cdc82f4d0a375701f92e90a8e09671c9a758ae1e1302ba2db2669e6c3afe759085b576fda102f2dd9d3c9c435feb23155054d0c977df8f72b922a976b24a89b3727b55dd1e9630bc716b08780f0ebe22b59486e0c3e0d250cf4cdd3b5136e32793835480b527327f07f3afee07ce284dafc00f15bf9076d2503b18aa8f4d3c9d4747263fe3618a178fd319ba2c3b2648605a98c5a5b64c40fcf864db828a11064e800648b1d8b42f338413b30e411b89db54a3fa1f"}]}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x1ca381aa, 0x3, 0x4, 0x8, 0x1, 0xa93, 0x40, 0x2}}]}, 0x774}, 0x1, 0x0, 0x0, 0x44}, 0x8000) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000002c40)=0xd0) mmap$auto(0x9, 0x2020002, 0x8000000000000003, 0x40000000000eb1, r1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(r3, 0x0, 0x24008801) 45.047985779s ago: executing program 5 (id=873): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x101, 0x103) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) read$auto(0x3, 0x0, 0xf3c) 44.762587382s ago: executing program 5 (id=875): r0 = socket(0xa, 0x2, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) socket(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000280), 0x109201, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0x8, 0x400000000007, 0x3, 0x100000001, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x2, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9902", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$auto(0xffffffffffffffff, 0x2, r4) ioctl$auto_SOUND_MIXER_INFO2(r3, 0x805c4d65, &(0x7f0000000300)="9850a3f6af7b0e5893d61dee48f1179c7c81b55e465f59ab1c2a7bfc74576a405792177aa8bca7c57d976d7db473e7f69f058b3c7e4d311038b3361af469cda3ebebb0aa852763d45975676246577d49089a80b9bfcef0f4d276b42a9a97d491b5bd7dd504e966e635a790c70bc822faaec96b908de23fe4ac4a9053ef9217317a42d1d09e0c5e00e7085a71a5bdf04370d1846a6bd61604e4944df1fbf5f16d266c130f24d320e834af660ca0929ac2dfc3ce98693cedbb82dde00cce4f3494d23969f343f9a37b5b3ffb79520800835ab60dd7ad578ee6") ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@prog_bind_map={r0, r1, 0x40}, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) munlock$auto(0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 44.275896399s ago: executing program 5 (id=878): openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000000)={&(0x7f0000000180), 0x7}, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf250200"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) utime$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0) 43.985666388s ago: executing program 5 (id=880): r0 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101180, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(r0, 0x9, 0x10040000000000, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = socket(0x1e, 0x804, 0x0) connect$auto(r2, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x80000001, 0x20009, 0xc000000000db, 0x16, 0x400, 0x18002) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getcpu$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) 42.111196437s ago: executing program 35 (id=838): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) r1 = socket(0x1e, 0x805, 0x0) connect$auto(r1, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) read$auto(0x3, 0x0, 0xf3c) (fail_nth: 1) 28.901852959s ago: executing program 36 (id=880): r0 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101180, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(r0, 0x9, 0x10040000000000, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = socket(0x1e, 0x804, 0x0) connect$auto(r2, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x80000001, 0x20009, 0xc000000000db, 0x16, 0x400, 0x18002) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getcpu$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) 23.469401771s ago: executing program 3 (id=950): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) setuid$auto(0x800000000008) ioctl$auto(r0, 0x5609, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x40884}, 0x1) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) 22.951377164s ago: executing program 3 (id=952): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='^'], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0xc814) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/036/001\x00', 0x1210c2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 22.571276612s ago: executing program 3 (id=954): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0xfffffff7, 0x3) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) futex_wait$auto(&(0x7f0000000040)="4d090dea05e6d6d4ebd62a483cf9507a6ff1f4269949a39b6a8124cc93d7636ce68eb605d1ab46b93e329b1b4125f2d52c100298b35818c4c9f57ff1da25df4af26c820670828d104356fdffcf954520f10637a3e521312cc47e99f3d6de5c9119c2c456a32028b4cbb88985a6674f9c50c2890e87248ba545772c6d3924a4bddbe424ec7b02ce7e1dc864eb6c9d42392c91c4ede499e530e4bb11d74affd584f87969", 0x1, 0x7fffffffffffffff, 0xfffffffc, &(0x7f0000000140)={0x6, 0xa}, 0x0) ioctl$auto(r0, 0x40044620, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') ioctl$auto_SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x40a, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x86, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r3, 0x9000643a, 0xc35) execve$auto(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)=&(0x7f00000003c0)='/dev/dri/card1\x00', &(0x7f00000004c0)=&(0x7f0000000480)='wlan1\x00') connect$auto(0x3, 0x0, 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010027bd7000fddb0304000000000000000037d95bea02d4c805d1e70eb84e4702b7ab29fbf3d44c3c13c215e61c9c3f7c74e9c1b096535f9614cdaebcd66ef07d3709f6ebf1672a910976983ae2cd626b998786caaa9e41988cf6ad68a18dc999cd2773e4d383aa3336ca8d973a899a6bef103279fbbbb845fbf7a6fe0cc30369d86d0d882602f41270ce6cf3241b883511a444b3f50a94092c553018e7aa098a4b43668156432350b1f5f9aac24dfe1af7d44c491b093050a2fe", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 22.225174779s ago: executing program 3 (id=956): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x4dac02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) set_mempolicy_home_node$auto(0x0, 0x5, 0x1ff, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) shmctl$auto(0x2, 0x6, &(0x7f0000000100)={{0x8, 0xee01, 0xee01, 0x800, 0xf553, 0x5, 0x2}, 0x6a, 0xbe, 0x4, 0x100000001, @inferred=0xffffffffffffffff, @inferred, 0xe, 0x0, &(0x7f0000000240)="b786d0cd098522d3cb1b593a4168b2a51a30073d6d212c6fdeccf5873ae5bb5a7a59c0a3dde1a9b800b643f059f33115fe676851d1d6729e6cf5a94013768d53dfa07ab106388a8561be0fdf64dd9d09f1ff7aa32b6f6823767e11aeb666cf83ff00b0c50de95cf522626a9fb4abd4ae6a8a96f8a58e5097f3eaa270dc5abff1946e4a70236beb87ec88653c6906b1970eefdb82138abf81ee5a7fedffd732725939cc4ff1628a912cbd862934eaf8b338c9dabb11cc1768100b49987698e4e6176aa00acb79ac02633c7bf32a19b7063c9612d0e8703e", &(0x7f0000000040)="f06f93b82bff37715e337554e915b5fe52041da3b658d55764f090ac696d655469cc3601e9da305dff8177ef39d09ff5ec5872fa59b67a4df9b9"}) fstat$auto(r0, &(0x7f0000000340)={0x2, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x2, 0x79, 0xef, 0x4, 0x4, 0x7, 0xffffffffffff0001, 0x6, 0x8}) setreuid$auto(r4, r5) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf2502000000040001800c00018008002f800400f780"], 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x100, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x30100, 0x0) close_range$auto(r1, 0x8, 0x1000) r7 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r7, 0xffffffffffdffe00, &(0x7f0000000140)) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cec22\x00', 0x34e80, 0x0) r8 = epoll_create$auto(0x8800001) epoll_ctl$auto(r8, 0x1, r6, 0x0) 21.427531602s ago: executing program 3 (id=957): socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x20, 0x0, 0x1f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000280)='1\x00\xdc\xa0\x04\x01\x04\x00\x00M)\xb9\xdd\xd6\x86\x19Tk\x1bc\xea\x86\x1d\xa3\x85:M\xba\v\x15\xef#yF\xb9\xceA\x9419\xa0;_\xe1\a\xab\xed\xa0\xf2\xd7\x8db`\x06\x80\xcd(t\xb5@1\xfc\xe0\x1f\xd9`\\=L*\xf7P\x06/\xdd\xc1\xd5\xb1\xd84f\x01\x04\x00\x00\x00\b\x00\x00I\xf8\xe6\xa7k\xa6kw\x9eP\xf9\xb0\xedoU\xbb\x03\x1f\x89\xa7\xd4\x9f\x06O\x90y\xf0\x9e\xa3:\xe1E\xb7\x90\xea\x1cx\x1d\xc3\x92\xefCSW\x89\xe6\xad\x9aW\xfd\x96\xa8\x87\x8a\x1f\xa1p\x89-\xa8}\x95\t\x00\x00\x00\x00\x00\x00\x00\x16\xfa{\xf1rr?\xff\xf1\x81\x81\xfb \xa4\x1d!\xdc\x88\x11\xc9\x9d\x98\xca\xd2\xabm\xb1zMf\x93|\x1a\xa0J\xb8\xa0\xa53\xdd<\xb2\xf0\x80\x87\xcc\x00'/219, 0x3) write$auto(0xffffffffffffffff, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) 21.265717555s ago: executing program 3 (id=959): socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x6) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, r0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xffffffffffffffc0, 0x6, 0x9b72, 0x2, 0x8008) r1 = socket(0xa, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(r1, 0x0, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/integrity/tag_size\x00', 0x40b80, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x10000) 17.646888914s ago: executing program 7 (id=970): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) r1 = socket(0x1e, 0x805, 0x0) connect$auto(r1, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) read$auto(0x3, 0x0, 0xf3c) (fail_nth: 1) 17.266389015s ago: executing program 7 (id=971): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r1 = socket(0x21, 0x80000, 0xe) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) r2 = socket(0x1e, 0x805, 0x0) connect$auto(r2, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC2(r0, 0x4122, 0x0) read$auto(0x3, 0x0, 0xf3c) 17.247975849s ago: executing program 7 (id=972): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram12/integrity/write_generate\x00', 0x2001, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = gettid() r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00b48bc2", @ANYRES16=r2, @ANYBLOB="05002cbd7000fbdbdf25210000003e0002002f7379732f646576696365732f7669727475616c2f626c6f636b2f72616d31322f696e746567726974792f77726974655f67656e657261746500000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00*\x00\a\x00\x00\x00'], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x24000051) kill$auto(r1, 0x11) fcntl$auto(r0, 0x7, r1) 17.178557534s ago: executing program 7 (id=973): r0 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio1\x00', 0x10800, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000ac270f8b5558f7e0680b265cdb8df2b0523ef913ad4bc659e92eb2ef4bff050879d29106d87a6f9c", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf251000000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket(0x11, 0x3, 0x9) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf251b0000000f0002006e657464657673696d30000008000e000200000005001f000400000062002f80aa012b8de04d1d8fbf1bec452a8736f5ec9aa9d5632fd8e1688007d613050143981b4fdb323e40d2110980d93c1b76313e1623d400e9e97a45600ba43ab868126a7be006528abd29a7b58e7166ab10a0645f011a3d5a4fc98a2b0400bb00100005001000e9000000050011001000000004002f800800050000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20044001}, 0x4844) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf2506000000080004008f050000080007002f0c0000840205003dd0732ade27f8bade1af7667883d2d785744b1150b14b9c0792e2935bdb1e90ebcc2fb977c0be6083394597faf1753ef8ac32ef3cfb86d84ad34c1a0d94b27c852f8a158b92a13d4f579eb7209013419e49124bd1e419311b6f4e7c7a1e21aae4c8aa78539deefcb754ba2b8777de70a1886f490cc18f3c74b4af2a62dbfca60ac277c353254941b36027778cd01c03cc9234f50af4dfe224e8b3f1d617baa6d2cef60313c631a97969f50923542e6a64dbf9f032ca07deb6b4f42e6e85ae7630862898c41bd779c07c8e69983e0ea8c6de1a4f0b9f12bf45936faaf4f03e153abdfb27f1adcda6dc5ab05424b5782ac022e764a80c6f0f398d0a2d30dca2072bf38f25f4094820d9e723187100d0a69c5e4946bbe5ff592f0882653ff3bd51bd5286a18b6779d8b62d6430f70a10e88f98ad1d05102d5c0d71bddd4d980f087ef63862b1f474547b40ad5996ccc6834901c39c5b1d13dec16e871546052023b82b10da8a42120a962e3fbed624204d38c416c80713b8db42e2dcf1207312874604b8482a7541971287bab06efaf64c813d01b895642fca1aef7c9da9cbe740d8cc7b1e6f4f55eb865fa01b0340929bad2459b32cba7cbf1be01505a988b42f84a13549babcf526d9179b9f9e9e3099060e8be9948e99b3208d49b5a65c4b05c3dd4769c248e4de4de8d00d476c5b986566d98487cb8451e951f59905c78ab4ce42e85b2ea72125cf5eef6c72eb77adf0e91c3bfb31a1201faaa53c404fffd8c4de068d6d96537ef57642a75dc2ca9183889cbf5dc06d0e8e5e2b0a1dcc713aef8b35922f38bbc8b5e864a16da7783c3fb9bd90bb86ce576f1942116ee2040453bd2ca1c353d8f2f9b8d4009918dda598043d618bd5de199c78c29a9af4b40b04000600"], 0x2ac}, 0x1, 0x0, 0x0, 0x44}, 0x60840) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES8=r4, @ANYRES8=r7], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) write$auto(0xca, &(0x7f0000000380)='\x04>\x01\r\x00\x01L\xc8\xb1\xbe\x94\xf2\xa2\x00\x00\xabz\x1a\xdf\x81\x89\x1e\x9eZ\x83\xd6q\x01\x8c\xc2\x1cB\xeeAd\xf6e\xf1n_\xc8\xe4\xe4\x81\x8eL\xa3\xfc>\x95\x02\xc0\x8f$P`\xc7\xb2\x1f\x18\x94\x85\xe3\xa4\xdf>\xb0j\fC\x10\x02[\xe9\x945W\x82\xe3&l\x01\xa6\x86[V\xfb\x1a#\xf8\xe4b\f\xf0@\xd5tK\x06f\x13\x17$', 0x81) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf251e00000005000300010000000c00018008000100b9a79d2ebd0c8689ea184d028980705bd5dc1a3925eb76", @ANYRES32=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c65ec00) socket(0x2, 0x1, 0x106) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio1\x00', 0x10800, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000ac270f8b5558f7e0680b265cdb8df2b0523ef913ad4bc659e92eb2ef4bff050879d29106d87a6f9c", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf251000000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket(0x11, 0x3, 0x9) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) (async) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf251b0000000f0002006e657464657673696d30000008000e000200000005001f000400000062002f80aa012b8de04d1d8fbf1bec452a8736f5ec9aa9d5632fd8e1688007d613050143981b4fdb323e40d2110980d93c1b76313e1623d400e9e97a45600ba43ab868126a7be006528abd29a7b58e7166ab10a0645f011a3d5a4fc98a2b0400bb00100005001000e9000000050011001000000004002f800800050000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20044001}, 0x4844) (async) socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x44}, 0x60840) (async) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES8=r4, @ANYRES8=r7], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) (async) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) write$auto(0xca, &(0x7f0000000380)='\x04>\x01\r\x00\x01L\xc8\xb1\xbe\x94\xf2\xa2\x00\x00\xabz\x1a\xdf\x81\x89\x1e\x9eZ\x83\xd6q\x01\x8c\xc2\x1cB\xeeAd\xf6e\xf1n_\xc8\xe4\xe4\x81\x8eL\xa3\xfc>\x95\x02\xc0\x8f$P`\xc7\xb2\x1f\x18\x94\x85\xe3\xa4\xdf>\xb0j\fC\x10\x02[\xe9\x945W\x82\xe3&l\x01\xa6\x86[V\xfb\x1a#\xf8\xe4b\f\xf0@\xd5tK\x06f\x13\x17$', 0x81) (async) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf251e00000005000300010000000c00018008000100b9a79d2ebd0c8689ea184d028980705bd5dc1a3925eb76", @ANYRES32=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c65ec00) (async) 17.042394754s ago: executing program 7 (id=975): statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x100001, 0x6, 0xfffffffd, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x6, 0x80803, 0x6, 0x11ffffffffffd, 0x81, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0xfffffffffffffffa, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0xfffffff9, 0x3, 0x0, 0x2, 0x0, 0x7, [0x1, 0x0, 0x0, 0x0, 0x4, 0xfff, 0x3, 0x2, 0x5, 0x0, 0x2, 0x0, 0x1, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20000000000, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd1f, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram15\x00', 0xa2000, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r4, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r5 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) write$auto(r3, 0x0, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fsconfig$auto(0xffffffffffffffff, 0xf5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r5) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0xa, 0x5, 0x0) ioctl$auto(r7, 0x8941, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/dev_snmp6/virt_wifi0\x00', 0x408002, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_probe_interval\x00', 0x40602, 0x0) sendfile$auto(r8, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x80000000) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) pwrite64$auto(r9, &(0x7f0000000200)='/-\xc4-\'(])\x00', 0x8, 0x3) setsockopt$auto(0xffffffffffffffff, 0x34, 0x12, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r5) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x218}, 0x1, 0x0, 0x0, 0x20040015}, 0x800) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000680)=ANY=[@ANYBLOB="d66701bc9e5f2c999f07c71b1825513b77064eab140ccb9ca15dcbe8136086c6b40097780152e891e66c64689c", @ANYRES16=r6, @ANYBLOB="151f2cbd7000fbdbdf251600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000090) 16.67342949s ago: executing program 7 (id=977): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x2cc981, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x2cc981, 0x0) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) (async) 16.554553933s ago: executing program 6 (id=978): mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz2\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000500", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf25100000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20080800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/uid_map\x00', 0x109800, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r2 = socket(0x23, 0x805, 0x0) accept$auto(r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) prctl$auto(0x10000000018, 0x5, 0x4, 0x20000000009, 0x0) socket(0x2, 0x1, 0x0) r4 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/sessionid\x00', 0x0, 0x0) getsockopt$auto(r4, 0x8, 0x25, 0x0, &(0x7f0000000100)=0x8) 16.360206219s ago: executing program 6 (id=979): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) r1 = socket(0x1e, 0x805, 0x0) connect$auto(r1, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) read$auto(0x3, 0x0, 0xf3c) (fail_nth: 2) 15.670406456s ago: executing program 6 (id=981): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/163, 0xa3) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/pids.max\x00', 0x281, 0x0) r2 = open(0x0, 0x261c2, 0x84) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 64) shmctl$auto_SHM_INFO(0x81, 0xe, &(0x7f00000008c0)={{0x9, 0xee01, 0xee01, 0x5, 0xd569, 0x10001, 0x2}, 0x87, 0x9, 0x5, 0x3, @inferred, @raw, 0xdeb, 0x0, &(0x7f0000000700)="ee912d379107c24f916d6d7427bc16cb9ac94c74ab1e7397ec35075a748e74ff001d6cce82ee86b39d88ed1419979c3f7d45e3cf7dff5bedb20c17ab2c9cad66a89a9f9080cf9fddcb67a6374ca0cb16df3efdd5dcf254bc6310c15a028f6ad88e5fe6e2188c24d8d395177ff325046079db60fd23b1b6fcbda5a36ae4ac0427694cc1c7629a7c8a05df2529ab262b83996cd873c692fdcb68db11441e0b1d3e8e8d67a4ece954f82fbb60d9967fb86fbc44634076e04e7210d6519bcb87cee26b292a4334ae810248585afff233bb43bfd6edc1d1aa475fb6c89480e2042abbe1ca3dc88584fe4dc21a0d", &(0x7f0000000800)="53e6b38fac355896abba257fedaed4187235825cacab80c09815d4115b2f357810959ca44e96f3669778629daa5af995356aad4bf39233f4b788c38950e6449ac60dcfcdf6ec43aaad1e07ea4cdad0b2581d97474519045f3df5c1393670e32cf650599973fb1fb0015e5e5c61090fce384f3ace98ce91e6b1a0aabd6f9cc3564aa80bf49cd86d69efe3ca55496ccac23767d37596d8e83d6521be"}) (async, rerun: 64) shmctl$auto_SHM_UNLOCK(0x0, 0xc, &(0x7f0000000a80)={{0xffff9b61, 0xee01, 0xee01, 0x6, 0x386e, 0x0, 0x10}, 0x0, 0x2, 0x8, 0x6, @raw=0x5, @raw=0x5, 0x5, 0x0, &(0x7f0000000940)="44eb21883b4ae8698bf0b94e08ef3652fcd0dbd8dbdab08a57b05cb2422e6d60d930d9794638eedd345de03d93c1d760287877b7a2267ad680a92a60937d119ab03dfdb99e5911749d5d75ecfe27a726ee04eeb1b992288f698d3fee08d64732e2460fa9661d025401d00d20f66c090b65209dc449b6fc66e0e13febc7ab8c267351efcccad630cce504ea041a0c79b05a488cdfc4ca1051ca49a929606b5b5bf0a380", &(0x7f0000000a00)="5d86625f76e419596555e89953d3cac869929e0240be3f613ce565fbec2d3b7d22c9b29dc21332690f314dc3b7f50ecb7a02a6dabfe4b7158ceeb1d656606b5366d4"}) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x258, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x243, 0x145, 0x0, 0x1, [@generic="25f78312e8b95f05c52e06709f4d19ed8c200ead968059c8e77f0b6a4ff264b03d3f527e5acef5ced7db2a", @nested={0xbb, 0xc, 0x0, 0x1, [@nested={0x4, 0x11f}, @generic="ac33cb607f20818ebf7f96a26896ebaf6eb7b88f9411d4ae55000b8b01fc4718a01b0e798687d657a57c76d6b2424342ce151cfc8740416f08b4ffc05deaf569a1994218d395acc8584ce69ceca8000dc8e89fe782fb33feff3db724052ac84a3af01b48be0d90a48143b725a923f41e76dac716842a21ba98d4819579d9c87b059bed1a3b63bb559e37347e198c3e9bf0d490e691e17240da29858253e9a9eb8f922724f889774cdc8a18bfa353bc5c76ffb2"]}, @typed={0x8, 0xe4, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @generic="7e992094588cebfc507778bb6c204020a5ff237a09ff60a6839ab7b46818f0c28312a11054fd9a8069f387ca7e46b5acdc20a7f5ff9639b4712f43c76da11582a54dae4c40afcbe10376ab17c80967d6f585e22ac1d012a118ae91c369004e544ebce10ff3c54d1f3c169e583e3f29c7ac2c243cc709bef02e7c761d1deb24606cf3", @generic="fc573b367589832dbacc772da2203a32f9f37f2e0dfc7d868d81ba12239fd5ee9a26c36b6536924fde974d0030391dd2ddc50964d65e9a179f15a315087af88dcc2d1210de7ff6be29325dc592dd5a8c093aac9589ef5bda323b81ede6c35a488f448df00102d890ab00fbf5e2ed6d7464aa8ed04c4fe5b3809083f5dd94a0acaad81d280b97d561ade293bfe3badf4615f2ed512a8d1e7d1885d57db362f851f47c72782fceab20a26c4c317da39e1974fdb1f05048dff9281cda5e5aae7d31e67743b1fccd"]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) (async) write$auto(r1, &(0x7f0000000000)='.&\x00', 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/pagemap\x00', 0x200, 0x0) (rerun: 64) ioctl$auto_PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x80000000, 0x7fffffffeffb, 0x5, 0x50b0, 0x2fe, 0x50b301a, 0xe4, 0x0, 0x1, 0x3}) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) (async) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001b40), r7) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000227bd7005001100040000000500130004000000080005000300000008002c0094000000050013001e000000050024000b00"/62], 0x44}, 0x1, 0x0, 0x0, 0x20048880}, 0x4000040) (async, rerun: 64) write$auto_ocfs2_control_fops_stack_user(r9, &(0x7f0000000040)="72f3", 0x2) (async, rerun: 64) r11 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r6) geteuid() (async) sendmsg$auto_IPVS_CMD_ZERO(r6, &(0x7f0000001ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000003b40)={0x13a0, r11, 0xb12, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe60}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x1375, 0x1, 0x0, 0x1, [@generic="7a65b3ac4517f5b9f4d5682be77ff45a60ddb66f27ed3afab188a6f1fcb3d7f49a82671a2b473558238ff101eb0e34493f7243cd78f395aa3666180a61349ba3f20378bfb070300adb87988f44630ba927bf7625c0aab5108a1f2c1c1e0ab57369e65e381aad7d76fb9503aa5f934f7425f9f62e3d65187eb687dac6520b8a2db7e9beb647b5f896092def8f8e10f152c2fbe6b92dc032e755bf195f4e0d266b758628558ccb6bbbd4a64d195396548d5e32b20e52b4940d447b1003cc6e3c14f16292e49e785aa3c91a290d07a69d649afec837ee08cbbbf761789323b710eec75c3427c200d67a8fb10554bf6f4db0133731e41c32d60f89b03cf5264d5ce6b71d42cf0d0ec26d7a5ad661f6d71b9caeaaa3aa57936344a4adca160b0a9aa79f51640b895cce30748ea75a71decfebfb409575e343299db3119ba7d84f847dfc8ab9d3aa127876d93b1cdc991d0fe83cf5b88efa2c70f7ff4c10328c4e9f519ad22c3dfe27cefe5e48884a4ac3d6ce0cb9ea7b53e01a2c3b770cf02c600d3a0214f4e0308eb7cca6071a74a2d00bf3f966d95b5df7c079a4518a7dde39ad1fbd9e9a7e5b01e8a2e91076f3fd41b1c867eb91abad21ebb550b629c367dea5b8898544771c99707fbf82661c55461aa284e071f7462aa7c97ea19ebb6b4003b5fe24b6d0e3834e9562295b8281456532f5715ffb84a4fd313cd4276964d835aed0198bcb0c9e9de150d3a26a3b629e846a4e817b75e60ad65c737d8d511b21e325998496c44a8d0fdcc20d8b2e7bfce2489bfae868a2f9cdf4cd09b43925706f717b87ef34971709f4152203341d6bf9dd2cdb6f3273a2d1cc9c6c87c711348a4eefa1fda6f0e565cd6778f7b180a8002e5041542b39228087043985fe22b8705173d416c389393dbb2c78f8fe61a94cac45e16dd4c538ed33be127ba93d73fef771268acb8e019c003de0cee1e9e3d5df34c35b28101172c2152d95fdb2b41bafc524ab582a98e74a54618957b752cbb180b382dc341827069a48b827df74d18b4296b8ad3ec0b0f76e302dcc5d92c6b1e5dde491166ba3557c88a990a7b1dbb81ec7ebc7ef5fd1d889ee7bffb96693e08227de80a0abe25d60d76ed8787790e6fd321ff4d089d3f086818534ee80bce2edd1739f8f068570545631433f6ac43e7cc3bce93f1d897efa21c82386d683a7a360a3220ba6a1ba310b49509003231720fce97ef5e11c2ca2fd635ee2ade234f199f99109358a12987d84014b274752935ccab1f969970f2e5faa63cd0eb3b1e6e9b759ec27ec4e57d4514783dea5d766198b804c3b12294f9aac99b926aff3af0021b73c8600e9116f6c1d813b7da70b71c283f70f6fbb4a607858d381c0d49941778c7257d35e57448de965f255dfa660e3109401be2f210eea8933d36e37659ef4af6db8650181ec0e67797c4f654c6339e579b854b4cc6f86eb427018c649c9740db3a5b088024c555aa471ef1825fa4478f1206a64c37c2cb5f21bfb7058f578499b9a07748f42ecc537a47ee099beb5f7ed2569aeccd7d877a8715f359e784761e671595ea66386a05834a69c336e6c41bfedf6755d9b47acef156e71989b72cf88cb3e90aa304f7e80c6d27cb9885d441f19114c2023ac00fe2e6fe34c7cc56daac65e6418e398d0d33d7f2f38d51e4e71f61b02715a086eb37cbbd1b2d64cff221e07ae95d662bdcd43749e95ada6119da25367620821ecc58169cee85f9cfca5779674f4d05e9a1044d234a8af0401c5af1300d64f43ee92b19e9bc11434a94982347c419db828fc32cadf5eef6a82b10ab8a2e250cdf84a4e5b8428a78c49f7ec7b69e1616d389f5d1fdeeaf5229fa69bef04e98ba40dac70226fcca8d77890192605ac7ca40c2ac3a73e0711a2b70a4c9176a5bc0e4958fe5564be7d4fcc62907ae53776688028832a7efc894036c0b849e34c22623f06eb1529c411ee0deda14a564dcc73bf237ffc6ba3b89042585cbcc4112f643eff3ca9c04e2c28ec4aa48966a35166eb6ac36deca60965058b34455986e0061ea656e4228fdbf72af512b04c0dbaab9971d693dbce9c5441e13f4aaaacf835446ab07866388e3fb04627b4ebe5e70a6d140dd4fd2bb31096653d87c5d39f332ba8c4f5b81d6009f128b2fe6ad52897c6cc388905b44d9581e55bab8417ed36714eac257ae07fa6a608b1f3ca124f6d4f33c8f667f5eb2a835867a7c5c95aba40b96031b91f628294f77af94749767409ff024fc9cfb0b86b7a4e4848149705d8df98fb0cdcfcc1106f6f4e1262b42388c5a863a1c7f762c984b6444655bd61aaf0404a74477197f4db71404b2fa27c07b0f6043b230889e02d58050ed3798165db1ef054611c022cdc60d14b07fef59ce27e1d427f04241611b453553d7bc80f5dcaf90b65ed6a4b76e592ecbd0c815f534df31891fc1db717eb880de754679aaee0482c77406bdc0c1fd0f4dafb77b50b3d2d31ee95d25ec95874d40f92e7099b84f02079f021bb5dc4a29fa86c6f066928f32e8e3baf7ae743b46fc5de964b43870a3cdb004cb89fed0a415a79aa04b5c34bbb27869044485c1956d3333c32d09d97dfc792e7d0fbeedc9c9527f5cb858b95da68246347440a7bd0968c6507bb9e9d10de045902edaecb89e5ccbf020aaa7859fc467e721a281130622fac6ed7212c8c4954415ab5002026a8c2f50108101f35696a113e8fcb7629d7d4af2877d365d0e3fa811af9545db28a7885ac28825df76504d30c786dd6760715474e9a38e2dcbfcfd086a68c9a8acca5fbf0928748f695a5242b03c0c8de0e1f4c884b6876b72980090a586242d5d95b148a1aab4cece40782c439c8e4e1243f3976f1b4fd7c5e17821d0253be1726767e52cc0870962adef5adf0a31d2880af8a155d4e4b82098665a48c9790c22a70770821d663d8d82f412df7ea97b6398fbe15b52d29834a6737d76bfd48ff3ddda05040a59bc293d8294d0d82b4b03bc9539d8f7a44b23a71158cfa437550f92e53313f44a3515e73853e5e9932e3761c3e0eae2f2558d9a3ed87240ef22480cf7ee037cd89217774d89ac25dc6ea816303af613ac93e97ebfe08b88912bfa04cddae2ac79d35809c65fb68419c71498f506544248f3af32614437cc67f382a2b9d0df6fedaa9d42298553cebd3ef482d50ec31ddfb90672c99ff9c430bf8818a27fd7e4fa499c0b36037625e70164f5bc0efa90affad08e6335f240a14ebdf1adc1cf40ff67d80822d94d256a8fc93ee85db1cc514d68394296c93828fda35010ede625166dc7e263d7d8f15a57817910b26e86a03da18430c4e4dc8de72b2b145c952e25f18191cc50030dfd2589124e73cd430c514b2b5938611af225c1caad0bdc682a8d3eee9ecfcd0afb23a2e8f7996b94a807e52aa2c242b68da8d5c2120f3d1faeb4ddf69e736e43d64c557bc024f7ecfac50b45f44d4899ef95c11762e883bf6143263fb334312335aa94c0553984cc7d87b3ad99e53aa34cb823e08915a10bc7e8c8172992f6b8ef7e268d79a742f228a23fe157d4e555d127bb13e2e58fc501265fa796a29cb126de3cc30b39fd1e41f879441cd598cbf11fb8ed407e971070265b1dcf3acccfb801b0127687654d6ebb64c5108d4206ce074a28ede186264bca97ca7bf2d2c5b619dfa828a5a47d908905d883196e0d1eb7fd32b1c26d23556e7e29b08451731aa03b1ec27377e505ebd2f9b3ac853eef6f8ce0f76b34545c6eff2a86284292fd8a20ca7c02d0b1105b259548e79946071dcaba6989b6d1d2258ae93d8230ec31f141d1b36d521fb7d35b4164153332d3ca1a3f80c42f419914029ddac52573d4f35256514be0380a94fa478882d86878453d8a03793dcef1936efbf18fdecdd17429e7c16408a3614572f6efabd3e5eb277b1e7b8d242b8440197d6af3fac1b4793dfb5ed9092c68faa50f98123b2ddd20d2fa9dedd666e1a9f23fa3c369b29315a8adf3a4b0e0141f68cc61f6f724c34ab479e345f742f80bfd8e4a645c0f45b29a2f27b10f55ef423d515a75c703853e327227f09a9eb72c844bdc093f551e83ada931bc630d1e25fce16fb2d502b1c8a1d8d081b4675cddf3f5d300c1efceb89e653ea9279591c4a841c14f507b80a0ea41b85237f71ee84d996d21d8e3ad8886eb6cd810570f83b9cbae226eced35d2c563e589b880149752791672320685cec68a34e172ba2e44f5bd64be0279996be0f522da41ac539838907558dc39c2b3e35136f1dd5c6e6be11be44466c76b7463be70e83a7683f3c117a4dffaa3230933b43736a1ef09f961dcaa38dea577580a0e3d2987a7f8f3a5843d94570d871f1383412ba53fea5479c24de76b66ab6f631c3a4b088c8dc26825f68bfd692f9c82e2136382fe527ed55533fba2d2700d67d14b786107c3ee9d403f726fde1b2013dac150edc872070a11174c53064c760fe17d8dcd3237943cc2c2c728d1471db186045df2312b1a3048315179ff718d18c56c4df7350298f243494151695504902e75cdfc87014b0d0b2cb2ef7ab9abb48bdc9fb65c58dbd7a400f95796f1e7beed9a64da173d43338c416a6029fe54dd3d3e792739aa20ed58418dedda1ca613a0232dec465facecc7090ab84e166d5a7ceda40f00b51cffba3ff30785db88909a9491e3b8ab380a026ad80c3745c70140f62c50332f32d60d2f02762ddb9cbe1ecc41a931f69c6c2eb2c31cdb605fbf4b161e1bbf75d91492bf3ac482a849ec7a5dc5811de3bd3163e235e9b0e0e1843ab5561cc600ea558595df17e9664fc35561de3ef1b214e81e63f25041eb4ac9f2b828be086896014748b2758460d7554a2d8b8e0e29c35b5b3134145d7c8fbce6e5798c72f104fed78ef145d428138094d661acec59d7ae99a0ba79a54c7d270f371eb86f504509cd9e2203d7b4933fcf510d7199bb27f1d2d1502574200e75c708e0d9a8f77da1639960674cb2e5a7c8d0b8d243832e3c014e4846f8e8c0c199c4a29fdacb3842bfe4984590d7852427fdf215073b51d7e1e02be03d58a0eb75244c11f750fdb121749ddf92050b52352169e67e7825ef3bcc317b1099bb92e1f80dedfcc92f2ce2868efdde8e44b1f63df47b892a56f5f8d626012ff70c085c62973b0511a4d5d542ddd80db91495bb71574525c061c700bd73858e42705d007ee98536e4589825b3baffd861ffcd0b1d5e67a95ce2594f2eb41920f4c4f38f9536171cd191e852e72f9e43f9fe71d0496778dff1c65931d330c4b5e28fe5cc0c37696fdbf618ed0c0f9894c55f57e96025e72b765a57201af228504ec475bc5d1e40a92ef8e9b49afa216c92d1957a24fb1204c227c6d2b4125fd8dacbab1416c7eed4dc757285429fb19cfd79ef3666c12aa125d8436f71d412fe3c8b1001c7b44f6de212f6d7db38c1d124168e85d9fe644f3b838af38bd5c6dee6e34991af49a3919f657d30c8ba0c97b6ac5bb50fe4544ca8b6f636ec3edd134be8c09e9a4cf530a5291135ebdeabddb887a79ced4650e63d1ba73fae4f141dd5bb548ce7c18a7558976ff60233a0602b018f2a42271a7cd350864ae9cf966037204be42a381ddd8370751989f236c26ae13e50541653fbd902f5cb87d0df7f247e382727662e79ca474bef11ea1a2a04a5e546aa4b291b83c3157bdf5c5184df8f5110111f2e50c178a1a0d38f778927a40ea348eb2d696c89541ae9ae579efc4fb77bf3b16e0408c0ff54c3f9e788ec5a608175c2b347ac8a0f1340bc45fd19248927551e307ae7", @generic="9175acc6927b5b610e394d0b94d4e4c82801ade2e09add9766b3a65bccdce62354f22279c38eab1949818d26c0db66cb780fb2f55877452058aebf1f85eb75dbce32cfb4986f10be91af5331827d0bf160cc1b047ea4fdcbe9ff3ea0e4ee3c1cdd8ee11a2927f176f6ce40029a47d23b287e433a1bbde288372f24e4abff320cd9e6ad25a4e81788d9a5c1483478694c3f8b222ece723da1e88f1b659faed837a860de9993ba3aa97e6c8cefda9148096296785d9b62a6633030810d731ce8c836df34b283ad9b6e6e79c88b331bc7cf54ecb06b4d1b33a3da6007fffb55dc3b4a87", @typed={0x8, 0x13f, 0x0, 0x0, @fd=r9}, @generic="17d1276cb9df318f3ec4771b22d8500a5d710de94c3c4aa7d43f4fc0d4bac5fa8a0838b8804fe27b037d887fc24a6e40b37614019279b7698392ae9a36b3cbfc456fa2c2e03756699c3261a96b2aabaf6e47aeabe18250e4f8c95be7b0e0300b40a970d872e01d36437854e72a229e401a0c2ad7c94d4e79236ee2c8f2a36cc7fd72b8a0bf9960df6717789af53415fae67773f16d8c7ccc9ba2361f4ab6faf80e6587b1d4ced6677245ad542aeb68dab5750f2be83976598047ee8786bd7db354e846226b09e2e4864a", @generic="03f6a35e2b8ce98b4bac545ef966d198cd3f6cd3cf91c5a78c564bfca83450c28bae1a4d8c6c88ba2d5be101f120630c290717cfd495476812e55ba716", @nested={0xbf, 0xdb, 0x0, 0x1, [@generic="e2fab55254405778745c309aae811e087b8d0c1f76df22504b43ed9e98ab81a4aeb84f055798712d1ae86a906bf107b3007dc02a82e772941d3bb757a5f01884947f02f3ab45a266b028c5d3f76e04ca12fd37139eabec5c5ca6c2879b0b7f12bfecb20a28407ce8d7047fdbf7a3908a70a81b560a9236ba141c3056a98b02224cbf20bbcee3f1aaa7296e712b97cba02cac02b8107e04511a6b93681f23186128ff58e47e370e2146efe67eb240f82b26da5a47bd63cb", @nested={0x4, 0x12b}]}, @generic="c9813d126141b3c419b02f5854910540b845f2e455ea576b6a69d48ac365f473dbe4b97d8d8b2e5418d692fb8fda28c9c3eac39bd1097e13b4f401c0ecef20b39a35fd4e161761480239f06ed23b1d7736ac26e0dd351df098d006c027e645340f00b79108d23c85e1acadb4a5e192e3f8206b84d8b06dd473436148221c546dfa44e853887e12aaf7b623bec76ac6687ab7bb8536e1e0bb4014b9d276625e80a7225731cbc0548bcef53bef3092a703", @typed={0x8, 0xb8, 0x0, 0x0, @u32=0x875f}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@remote}]}]}, 0x13a0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$auto_IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000141}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x4a4, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc9, 0x1, 0x0, 0x1, [@generic="aac79c6bc7d370485eaab2ccbff494cbf2e95b60c17f0776d8451bfc5174e9702be518f32cc1cf040c64e428694191b41179c5e4ed6618d28b5fe2ef9136418d9d9acf068bbd67036ffdc62eb0f72fefaf59b4a8b4db75fe8d749c514f2435e05eae190e8be468bc1c9516f52949c4259027161c924648ee13b485e2e6306a0af630c3ec0f79a8ed643af74f0ed0e764fd05c4c89b72eccc46a23cec304d1acaa8831481aef2f0d95a26c00ab053126c608aa79b76959080c7cfd91adad5402fbe0dd4a4e0"]}, @IPVS_CMD_ATTR_DAEMON={0x3b3, 0x3, 0x0, 0x1, [@generic="a3dc133465b540666fc3db75574ae647a2fc25689d0f07181c98353107fe63d72a6a10f469936c5284a8e3151c87d9485b225e6cf8bad266c5a0dff4c57ab4a5caa7e025d9b0156aca7ad5c00fb2bfa532893b39757377eb6d06ed581c0324eec4a012a013b77863f883baec0203ab8c254bc5f877f1f6f5f026d0dfdb93f90ddabfeb113a98d89bd2dd11566b2b8319102e9e34df7084412ba6e0487dea24b7fa44b235e12a5281eaaeac2755ee07c2b959e0739ddaf9685e8d7f515598421c298dee05e7a773617d71628b94711da67443c8d0143ae936936571", @typed={0x4, 0x134}, @nested={0x2d0, 0x13c, 0x0, 0x1, [@generic="4c93aec4e63a25c536bcf3ccee8e567ab994e64fdf5a4c4c856bb5d7aa3ffef0b84cc9372b8851ee55946985c0dbfc1c7a4dd42104d4d5ee3f8e720e1a6a2abc2d3f99a0830fb621668af11fdaba90451235115ab9f3cc3c9a02188ac0ba57b64189e29f2c7eb7235ce9a4d765eefa25b2a9f156f6705315ff3018a36d4ee077bae9036d9f7998a01e995176bb4c725d6eeaafacc266709fa06ab2ada560ab0b1b3bbb0937ea78addc20878f40320449a17f2563793b98a06a6f974ed4", @generic="eeba110b7e5848536d6b5a3981c85f813019de344529785eb72a88d4ee3231c881e06051c32214d563f22284bceec4ab91f3e5942246b1266a58e3fbb955061da4b14b0d2236525edd996453abb62348", @nested={0x4, 0xff}, @generic="fd08fe671ecfde9eed2b33b083707a9f46b1eabcfeee06235bd66cb9fd187d066fceedf5d474942bb427e75a9f181aaa9000ba3cf40e73ba5de5f6512497c6c4ba2760938d3f58339496a950cf68ceca27291b91b6e02d857421b348c586b4df7d0a935ae3b1efb9ce9bbe25f39aac10bfd3885ad0068a46e7d5bbfe8a920b492111133c63af2a6167311780c54462c3102b25e1db4a6ec9dc1d01e91696fb072b9f0a36fa9c2988680038b30b824ec73850970adabd14b6", @generic="1965e34c2f76b886520ff5722d53033849c86421ac89040ed9d74c8bd5dd32437397d19309fe1a6b8bd970cfb9d940f6d8a03a0d4d3b40b4cacc063a14e4efac3f50363f4c1314b0c8fdb5e075c3f6f77ed414942b197b7961f3b241fb44626efc8197ab63d6d9175bb5cfe69415e6cfa19ba9e29fbb5763a3eb01819dc66c2f24972f3df6aa4d4c4eebb8f4aedf231bb344f086", @nested={0x4, 0x52}, @typed={0x4, 0x5}, @generic="7648b24a4790dc9984e12e05b5c48fbcda4d9802b4163b7c00c7f4718999fd093c45f0aa6cc6d96724494dbd681d2ea4cb199850041d1ac66caec47b77ec810079eb8eeefbe9015052b428509399dc7dff69cbaff09da7af0b800e485d8e4faa9c2d6b", @nested={0x4, 0xd7}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x8004}, 0x8805) (async, rerun: 32) close_range$auto(r7, r8, 0x0) sendmsg$auto_TIPC_NL_PEER_REMOVE(r6, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003ac0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x44008011) 15.415328594s ago: executing program 6 (id=982): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x285, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x880) open(0x0, 0xa22c0, 0x155) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) r5 = socket(0x1e, 0x805, 0x0) connect$auto(r5, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) read$auto(0x3, 0x0, 0xf3c) 15.218157872s ago: executing program 6 (id=983): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) prctl$auto(0x2, 0x7, 0x0, 0x2, 0x1) ioctl$auto_MEMERASE64(0xffffffffffffffff, 0x40104d14, 0x0) (async) mremap$auto(0x200001000000, 0x4, 0x4, 0x3, 0x100000000) (async) mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x6, 0x0) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') 14.782406695s ago: executing program 6 (id=985): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x1) setresuid$auto(0xffffffff, 0x7, 0x3) r1 = clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.3/local_cpus\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x24) tkill$auto(r1, 0x9) sendfile$auto(r0, r0, 0x0, 0x3) 8.803948914s ago: executing program 8 (id=994): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0xfbe8, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) open(0x0, 0x22240, 0x155) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r0, 0xa004b70a, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x201, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x84f6) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) setsockopt$auto_SO_REUSEADDR(r2, 0xfffff000, 0x2, &(0x7f0000000200)='ns/mnt\x00', 0x4) bpf$auto(0x5, &(0x7f00000000c0)=@test={0xffffffffffffffff, 0xa, 0xa, 0x7fffffff, 0x108800000, 0xff, 0x6, 0x2be2b3fd, 0x8000, 0x10000, 0x2, 0x7, 0xfffff890, 0x1, 0x2}, 0x80) ppoll$auto(&(0x7f00000002c0)={r2, 0x101, 0x2}, 0x6, 0x0, 0x0, 0x8) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x18c, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_SAE_PASSWORD={0xe, 0x115, "2d307e50432bcc6154a6"}, @NL80211_ATTR_FTM_RESPONDER={0x168, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x9b, 0x2, "d729f55da39cf619bd0794e72a229d451480ef4db5103572e2413d66f5f6e0962cd9c7716bce9ebd580a8c51bfbcd9bb6c64f3254b20e57c69024661ef8e473401a81ca7e254096867a6c93c944650026e36887a08293b5fa2c54bf5ef91df8dc9c1aa273dc74223485769e429844ee659a29fd51da55723234f3111671a25dcb01e2d3d6465580b4fbc7501955bb186272a80c116836a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc1, 0x3, "b1886a4f780e82e42b46c5ceefedd89f640eed475f0567dd9e1eb20f8ccfbd0457644854f372719ec7568ed9f2d6b38d76780846f99dd49db3775a2ea1fdc0175c5b1262eb1b4c33bf3c595d3ebc16146a5ca12e217561a839a9849f096a0807df70b920f9eadc231639cb6f719a0929fce619c8777393484b5bf0f776c12b6b9881d3d7a2605f5cbf592e14a91738018ea5fe716423b0fdac06ebd3da713b7d6843946b8fe7102ea97cbe2203393988f7a9ed8a0b5c652d4a9bb8a66e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x333631ac60a3e96d}, 0x90) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 8.473970514s ago: executing program 8 (id=995): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x200000000000009, 0x1ff, 0x105, 0x14, r0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x82, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv6/conf/wg1/drop_unicast_in_l2_multicast\x00', 0x0, 0x0) setfsuid$auto(0xee00) cachestat$auto(r0, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0xffffffff) 8.392909435s ago: executing program 8 (id=996): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) madvise$auto(0x0, 0x20499d, 0x9) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) mmap$auto(0x46ffffffc, 0xd, 0x4000000000000df, 0x109b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) rseq$auto(&(0x7f0000000040)={0x5, 0x8, 0x80000001, 0x1000, 0x4, 0x2}, 0x8001, 0x0, 0x7) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x8009) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000140), 0x84000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x2, 0x4}) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x10000, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x1010001, 0x100000003) 7.32205167s ago: executing program 8 (id=997): openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x101000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x280fc0, 0x0) 7.299614355s ago: executing program 8 (id=998): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x143101, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000240)={0x9, 0x49f, 0x0, 0xf583}) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = socket(0x10, 0x2, 0x6) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r2) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000015f7d4264f130a3a836fe2055df0e9b38eb7bc0d4b86e63f1287", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25110000002c001e8028005e80080046800400f7801c0010801800278014003f0000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r5 = socket(0x1d, 0x80003, 0xe0) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) r6 = socket(0x11, 0x80003, 0x300) mmap$auto(0x3, 0x8001, 0x62, 0x10, r5, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x9, 0x4, 0x800019) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto(r7, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5\x00\x00Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) 6.999205672s ago: executing program 8 (id=999): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) r3 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r3, 0x65, 0x2, 0xffffffffffffffff, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x800, 0x0) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) mq_unlink$auto(&(0x7f00000000c0)='/dev/snd/midiC2D0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf253200000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) writev$auto(r4, &(0x7f0000000080)={0x0, 0x8000}, 0x9) 5.674388038s ago: executing program 37 (id=959): socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x6) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, r0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xffffffffffffffc0, 0x6, 0x9b72, 0x2, 0x8008) r1 = socket(0xa, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(r1, 0x0, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/integrity/tag_size\x00', 0x40b80, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x10000) 2.316695303s ago: executing program 9 (id=1005): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) r1 = socket(0x1e, 0x805, 0x0) connect$auto(r1, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) read$auto(0x3, 0x0, 0xf3c) 2.260103384s ago: executing program 9 (id=1006): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xd64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x203, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x2, 0x800000000, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x20000008000) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_clone(0x1a7b411, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r4, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00820000", @ANYRES16=r6, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="0800070005000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3, @ANYRES8=r0, @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c00010069"], 0x8d}, 0x1, 0x0, 0x0, 0x532ec3b7e6702eb0}, 0x2000000) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRESHEX=r0, @ANYBLOB="fbe5a2964bd133756270420c6df83fda3df992931c8c4ef8f1d55d426852346a1ac1f99d464e0977bd08827284ed01f0cf52e3a115433f25ea88c2ac72930e78365fc419ed23e9e806bffd7a5b95884851921bb703ed836148451db53beb8169f792a390f30a7e46ca7298935c2a13cfa8d4b077941a139b0cb184b78104185328ba3c37fb73801b60f9ea9c1c21cff30c7c0002fafc21ea9e907c120fc4bd8dde90e55fd2a772a74b8b3227db8d9d32e30b0ac3bd39a023c13d60df658ae29e07622d1bac00"/213], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r8, 0x0, 0x3ff) 1.328493316s ago: executing program 38 (id=977): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x2cc981, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x2cc981, 0x0) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) (async) 1.30954699s ago: executing program 9 (id=1008): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) sendmsg$auto_NL80211_CMD_ADD_LINK(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/transfers_13\x00', 0x402080, 0x0) memfd_create$auto(0x0, 0xe) write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x1) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001200)={0x1338, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_RATES={0x1313, 0x5a, 0x0, 0x1, [@nested={0x108a, 0x109, 0x0, 0x1, [@nested={0x4, 0x82}, @generic="993d0518a1070b5745e8c46ba7c455d4ceb78663d0c435d0eee4c064b08ff4a189499578f72bf2d3ee184f39a3b40e9b8f6ae47474f3ee892108d0e3fdbc0381ec17c6b019ab390089a7cc9da2d6e6e8dcaa07708ce8dbd46ad5ecf042909f6629444d57255fbcd0ee97b60fafe8b8baa3d91019f86fa8ae41db796825829f6f6a60b38842d0fb3ba75b07f620a4ef9b5396e3879e7af8b6fd7c794a994384501a9e3094faebbbe0b3751dc24a6551ef81300f9b6ff0246e03d59ece96474dbf6bd23ab7fa3b58f1c89262f140b2fe62c8f7cab9128aeb7c73003ebf9e2b8e662e6cd41894b4a55f2a5779acb0477beab87c953de8cd23c25dae8cf0f3fe2005f018a3d9d7a9a81521506489e4e22515ec97dedafebda654992db2ae5f91e2283df1d20f31298bbdc0efda18f199c10fe1fad1ac749587b4f6ef5570f4a5b9fa1ae26ff03794d1008a788a6a0cee1ec8591db8fd7a713750cfc092c9d51f0539dadc953849ed88a728b3d5add7911211882d7bdfc7f70f3c6d312b6557f60e2618e694ffebe7031a3fe84e7aef27b7595179982f13950ce36a3ed069c05a35672e20deb126287dbec0ea26bcfacffbd5e600ce0476d8edb654b803bb163733531717b3e5f10a243276675f9a15b76d50234094aa22d69f2e1eefa9204d32ec30fa89f6d85babf30cfb22e3e48e9fa1e7b7e04e5ad0f6924b8797d71af1cae9bb7233e999ad4727eb9c9e98289e94a505cadd93f90bd5b689c6284a95dee42c98966b160edeb9fb37e0d70aec2cb1f971cc195dd50abe7e8678634a86bf02597b3cb01623ab7672132526d05703fc0fbf44ce2037af286ade38c9c47a16622ab7065f365a0585c87c39942b3a8e2bf4d4f0614066fd7ebe778be817863dcb329c5b1da5730bb9cbfd55bd6ace1966929d90fd5a08f2da70252210cc4c36f3a9a470182ab1db4d96968b36db733fa743121236916a9902fde893acda694c9a3525193457f46333a9db4d0bc8b3a3cef2d62d2830ab549ab8650eefcf851cb526d8b0d7c8d67b1e12468a26e5cac53cce40c6de1094525362f188756c7c2812efbb85e77449468cd645c1a559227f43b96beb81ce588ad1b52ac13a6d2e6feb5411d705958e3564c67e1c281a8a48dd47f58f61242899c9366e371f96a817bb1828dda132f28aaf1da8ddf20ffbce3aed11f8d1edfff0cf39cfc2b116c456240100d8e8a7f8e0583e8b2e9c53a95c3b78164fe53a3518abda62aaec428bcb705331c5c371728f883c7f666601091fffdb14962dca1a08926ec1ecab2d5f73d360ac80ffee929cc3dafa9dad7bd83a55bb02c12815a422139d66561d00b19345e01defa76fda5822aa269b6959b2fa5facbe5395141eec7370170d787020a9b2f50bbdc1281c9358b4f84e5c6abfacd40e78514807dc6c87027c855b8fa525fba4fd61a48f37bdd01222dbaf32674c23e7d6bb54eceb2134432bfec4607059b396d1829f66bf62ae042b9121d582e5dd3c78516bb0b864d593e56ec54968bd340e427e85397fd48cd632911a032447b8a2cf082cfb03e81dfba540b50c00c5b7f65f44e16b9a4617bad56e5adab558fc29ccde6ce2b3ce97e105b47931328d89d30f8166f318ef13e2ba39b4d86e3dc5e2204b23997b300e0eb4e2b1edc10b797a17c4ad5075917aa693e8bd03305b8392a57ba0379ebb06a212c46128913a650dc262f8821b29eb8fd6fa82588edc8819d17f2f0e6c591799350fb3f0977e2dfc07dbf8081fd8b770c5d478478a863b50860818ca1af6047dd7081aa9a0b255797e907bfae229021d8db261cecf4d680db634f20f2939bbb8a6ceb6197f018149010b1348501ecb109137c777043f4b89c4fab34bbb591a14121b61a6f2370cb5ec501a422bd6761c1d0b53900ea58c74d4208f1a8cd3367e5ea7fe972b37377428b77d754290bf63bc4b99d78b447f22e2e0133af66cfb427b10db884aa1ad0d01d273fa18189416fd2dcf04790fd57e6370a68f8de225821adad05cf02a55edc0c17d15232b4eb6eca6f2acbbfbf88a73e9b2ac4144ca4a6845ff8159545d836b8e229917f6f992d0ae170b84ccb27b5ca79c2d9bc6044d3ac23c0d23fe30badf94f0a19df59696009c10bc109659429334a51310b146795d7102d7ba5de7e8d086f6aa66ded1fe1b8583f2e4f56e583ba7a61f1df6c66874abb31361142d86fc5ea3cd684be3e15410286813dfad3f9c961f3134c38ee31d0aa8e721b73457478623cfde130e12626f852052c64684063557f7afb3d9f3a2799af9b50a4989d579afc6d75ce659590dd965e34f1f0d307ca3699776d3ea6281ac09313eda51a58147d29da57127d49ce55e6e27dd255f6d832b5feeab7a84c37737c1ae1d17fde9aa266319b8571334ddf5a4a9cd25f6edbd80fd4127f4f6a1b3f37273f258cf55554df259ffa0b9c31fb4da557e2a61d870d667aed8fe474ae049990ea0c1fdc39bb41caea9bf87ee9bab4ae9e15105032e6bd2ab034b79b189d1c88911710640851ba48b58d9621b7433333ef08d6371bd94656d81e3c37dad142d490230ba332ac14909859d62f60341f0ea2eff052c6d0f267fe419f00701bfe641dbb41b959e3e0aec3454b89651326e5c07ba5f5f503dc6e291e61b7d1926d3a740c415822f3a20b1d166a6034769461d1700bdc789d90093158c270f2659666599211843c5f4876386642229f9b0497dc89f4b58cd022cb8b983433542d7967adcc97579b0ae02d60ac985d75386dc4e22f2378c0336f99a9816fe11cc092cdc1df5dd7463ff10bca4e43f90783e37f196d439e3904bb9ee9c7ab0944c6a5587627ffdd5d289eefcc5d52c174e5a596e8d0432a35228964130c399574b8bd6a0d6a113821852972162eff16b5e45cdc114845bb9edc7606fd6c01e619ccd8791c15c1b850bd48b5e005292db8832e1e0c55fd85660c5884e56bf609f04274021a40d93f5ce0a05bc15e5b501c411553f836fe9c1a9aff0506691c5ba6d0c905645d8405609b71c97e1ac6b9e70fd1c42007b6cbca24d30e71a46115917a97e74a4145f6194f124e474699d50773a3813a435b73875f9b71646a46eca111b677dd40f256e28ab163acb1cf3c956959edcffe3fecd715f62dbc9ac4220d0089026d7f76ce753db93dff3f124d877af594ce94d7180ddfa76e3a70665eb9aa97d12433b5680b62df02a16701796f3ba9132acc1ed800131779a764999a34e100877858aeddcc9b6424f9844f8774def34a3c6cc8ed0021693be155991a55ed0b8c01ae4dab006e0205f0f8f843e16772206bc23348b5c7283635d489c7325214182a2c323730b7d74310ddeaefb4b4f102172a910c261a0b608078f963fd38c9b67b18ab06fdd4e3b4829c8ac3aeda14a81e3a849fdeb6f259e7ba52919b39d471f73baae967dec56b6857d3c159a0793ac73a940cc71bb7009fd64709e105e7c14c8c0cb56767fe6eb6afe3ac0fd80786f38336f76acee8ea721e6990cef2a3ddea115652e07911034426fb08a8a1726a72695bff5c1536ea86c1b014b32dd14f36d02913675655efc48ca305f9ce32646b18f942483e2e5aaae5aa65a6e89356dfc223b9d2f03088164fc20ec2a2b5e2b6abd17f112c351da659756c4817acb5298a340f1d013d338a255e90ae395c24f9553c76bfcc0cfbcdac024d0a86bfe8586b9f907154a6f4839895feace7e90ce86d466759ba1bfa4f5a636f98621efe6c2852b2914f8c119f8f9faf584a14eb0ec0c439d363dbd11094829490875320cddfe2e54d276ce25f00e80b24c957d0d7f4b100f5c053aad76e51c413cdb2837b9079f0ed7767786eeb36535af669eff83b282740567cf4c7d30b8a8cc8ed6bd477889782dc98670548d84090a0c6c3d590dd1077c38792b7a54c9c733088bcbbc86f754e7e537e311096c79866bf1b928253a06302c7ba4a0b795417b0460fb55d7febccf9a1db0c6a123fdf00d663450faefacfc92dfd12ea61cf1f5ba513622d6a56acda6a344cb8a70cd74dbc6b59f0a231eec46f77b3e084184b461a8068aecd47d98edebe52df257188a399eab477339fa398ce5e692d22dadfad6f6155874b0302cddf057e9ee1e83e9bbc5b5b351562e3fa8b6d772899e59c63d616894c6bc4a7d569dcca18e863fc02b7bee30118a8ac756d92b6e8c81a5d48d171fd0a2be1c8cd037478b24e068904dfc9be0cac900af8e7e7f1685f338c24bcd4f8a33215fc240b0f9142a6ba549160fb965917675e7536701157da737a7512bdff708a44ff4d2eefea8b76964cfc7b4fe74fc52680f58ef354782a77cd7037fba7af37bb1861618e6a3db7792c2f374982ec44dabaa5e423e9760ad13272dec074ab629f73e0dc62241df31a6091c6278cce2cc66be3c4e0f60cdd6a2ab89ce34b8314199834a433f456f68dd67dba759951e1058607e979940d34cc6a1bfa79ace831069fd410d49e2b2be58d9580260d37065c3f47db856ef3fb29ffdb50d5d58f442274212e0582c5c9482ef898cf6bb5c31b90a4c13778dc65e2fabbfb001a829189fd4379e13b5cd774f24645b9ef437185abd4b752ceec11e678a8033bf200cf4ddf871a77779107b78d910fbb95bced1579d7f52ba423e73731b7c22ecb893e648ebb679580f9630f3cc245faa2b081700542e8065e3c5f8a63ff7ff6e05140b29de87dfdee9adb857e27503036cfc688018566395175b83432198b0bb11b83d7b7430cf96cb1b69b71f946a46141bbea62fb83840760aa765ae94e71ffec336b44cf61f6018cc465c0d9c43f659f23872c6feefe4f7dab1e3e2c8d6fd3193dae0f27d2f5e3b64d03cd308f4f895bd300dfbdd123cf0fea4b4132b8f243779db336997c284e1600c277ac46aad687c122f6d398d1f606de048e3978f17e390dacaa6f5324069e4dee869496bf874e123512bb91d31e5e37b71261a7ab412a5684438aea35e1a0c4507224f36e710773b3385af481a01176a41b53b79908018184eae3a4cf448c87d349e966b52fe421dad9fc5e1e7e4913c0481e4442f4ce924a3d08c760c8ac42d89f33b92e039ce14bbb85d07f564dce67aa2b0c58d378d5c2ac1c94f77c08201cd5a3051164d882d25cedc32e514725310094b74624eb86ab2791eb7e0f7e06e762c63925c1c512b460c3c2c67e3c0491d5f8d57beead4a3be88dee592bf6e6d73d6566104c17e3e853f34bcc6bee877f86ac00f3eafbfb56f1ac1ff531b21a5add075a45b0703df996fb8a62351b703b8b148f822dea916967ab179d38ec84b47238bf12436f3e83a493e8f7213b6aa80a811e33a7b854b21923902ffe3a43b54ca287a4d2478695cc2f005939dcdac42bc2fac8fdc539e7d4665087476959a59ca423235edb2d1239bc1b2dabaa6f829f44f97137b17e2f2e53ed897b45be16068dc8239666544e2ef45b965cea82bb70a27fab3ec2dac0d2c5fd58006df54c08a9e69205b08e5f9aa138391b533f61c497d1d0aa933d019db4834427b4466203569f69f6b66b9bfe0f9849ba5f087ad6e2bd19870277b0aceeb1a15149b182c936291c3bb5255bc15ec74fcee43b28e0b871273bdfffab3b60ecb88e228a0978dd406245a6d65e4275202765ec3865442b895a31e3eb72c908f19bff097141055f43f5115161bdc95699570ae3fac2d10f98822b711d3dab8799ccad6e4f37e889d0979f8ab9246ffa575f3fe88594e80594db1c600acd3f38474e6f3aaf5260627dd140cef820cb6d48568e156dd7df1595915c5c77d", @typed={0x8, 0x127, 0x0, 0x0, @fd=r0}, @generic="2fcd087ae29195decea97c9192a3d47213b04e06410f0a2b286132bc747ad79870200afb042ee93874579334f708cc5a336894b3b4cf1b4cc7e170debd2f19d4b748e7057a9842898f0a894c57050e5fd37a7be9010c0a6784e33368d5e07ef2fa15badc58f0c851177d16866564347ff0110dbf5d9d5ffbeb25"]}, @typed={0x8, 0x61, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="4a85c468bcf6fc8039b4749eacb22a26b9d5a4ba7afc55df1cb2828471fd4aa1f696130f75405bb34edd5d3e98dcb838ad1aac08fef99114a43629c424b555b5a6991b8b9aa8c59ef662a66fff4abbbe2285fdbd2fa813312d9e0109e27e9009ad02c6b6a93f15d3691a3873569ac39140c0fb47ae025362b6849831f530b60d482b6c6c962541a11e566d7eb3d0ec5ec9a5a898c4e9f06c32caeb4d2e391c9c0a98f254e6d1c373535c5de34ac74b322fb9c6aeb755e474b617b1c488b3ffa8cd72f9cf05bcd3b78b8a84a2e3b5f93813920f933e56e75e47baa05946784cd13611282a0af71a68750d5a8adc674692cc040011", @typed={0xc, 0xdd, 0x0, 0x0, @u64=0x7}, @generic="a8df886d85d96f5553b082d20a97986548d72f6f6e7d7b76ea902f77eb9991abbd0996e4bb499ba94d21dafd228354e66a3245bd36259d9142ff0a7557559bf879e259c7d3936dd22aaaa45a985db307b79baf5060d2dafe1a6753a05652dd5baffa910535a1dd88bb3f527316f9c6e8a3d57ccf926e2386bfa1", @generic="db", @typed={0xf5, 0xb9, 0x0, 0x0, @binary="e17d19eb97455c955bc8dddbe1d55c7c1d2dcb474ab0bc44a643fee31982b2bf5603905c02b5cfbd2b57bceb9b3c65c81d76cf1442be9294551d92cd5149038c73d92ee767d991c5b2eee02199454f840d15ee577e51b6a4882fb1c128ca451f32d6514ed00ac10f5af8b40d743ce3be40dd00276d495ce9ac1c2a31c520d157de95d9ac655964a9eb93d509bca3bd299001c405ad5342a0c8f8c185fa91fc4ff563f6dcaa9e6a1ba6f5e0a66e64383615baf959bcfeca6b689a9afc457c95203204cc258f4eaf4ef60abb1e18313ae6a1a1dad11227a6634ed97719a87eb99564a97f720560df20f8dba62c38f097307f"}, @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@broadcast}]}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}]}, 0x1338}, 0x1, 0x0, 0x0, 0x81}, 0x4080) open(&(0x7f00000002c0)='./file0\x00', 0x127c84, 0x20) fcntl$auto(0x3, 0x401, 0x3) 1.099215833s ago: executing program 9 (id=1009): mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) (async) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5O\x93\xe6\x19\b\x9f\x92\xe9\x04\xaf\x02\x0flp\xe8\xafe\xe64\xa7R\x02\xf0\xce\x9d\xad\xc9^\x10\xbc\x15\xbc\aX\xf1=l\xd3Q7\xf6\rE\x94\xe6z}\x1d1o\xadGs\v\x9cu', 0x110) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x8040eb1, 0xffffffffffffffff, 0x400) (async) socket(0xa, 0x3, 0x3b) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x2, 0x5, 0x9, 0xeb1, 0x401, 0x20000000008000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c", &(0x7f0000000240)}) (async) close_range$auto(r2, r1, 0x0) (async) io_uring_setup$auto(0x23, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0xc) (async) socket(0xb, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0x2000d0, 0x0, 0x4) (async) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000011c0), 0xffffffffffffffff) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, [0x0, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x1ff, 0x81) 58.903254ms ago: executing program 9 (id=1010): open(0x0, 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x200000000000009, 0x1ff, 0x105, 0x14, r0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x82, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv6/conf/wg1/drop_unicast_in_l2_multicast\x00', 0x0, 0x0) setfsuid$auto(0xee00) cachestat$auto(r0, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0xffffffff) 0s ago: executing program 9 (id=1011): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = open(0x0, 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) r2 = getpid() select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x9, 0x7ffffffd, 0x7, 0x8000, 0x9, 0x1, 0x1]}, 0x0) process_vm_readv$auto(r2, &(0x7f0000000100)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000080), 0x1dfffffff}, 0x6, 0x0) ioctl$auto(0x3, 0xc0585605, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, r3, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r0, 0x0, 0x6}, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x27, 0x0, 0x9, 0x1}, 0x800009}, 0x5, 0x20008000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) write$auto(r5, 0x0, 0x11aa) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 7381] do_syscall_64+0x106/0xf80 [ 151.939987][ T7381] ? clear_bhb_loop+0x40/0x90 [ 151.940022][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.940051][ T7381] RIP: 0033:0x7fc45f99c629 [ 151.940076][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.940103][ T7381] RSP: 002b:00007fc460855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 151.940131][ T7381] RAX: ffffffffffffffda RBX: 00007fc45fc15fa0 RCX: 00007fc45f99c629 [ 151.940151][ T7381] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 151.940168][ T7381] RBP: 00007fc45fa32b39 R08: fffffffffffffffa R09: 0000000000008000 [ 151.940186][ T7381] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 151.940203][ T7381] R13: 00007fc45fc16038 R14: 00007fc45fc15fa0 R15: 00007fff48be0e08 [ 151.940243][ T7381] [ 152.313200][ T7366] team0 (unregistering): Port device team_slave_0 removed [ 153.114091][ T7366] team0 (unregistering): Port device team_slave_1 removed [ 153.272783][ T7387] netlink: 246 bytes leftover after parsing attributes in process `syz.1.271'. [ 154.091412][ T7411] XFS: Clearing xfsstats [ 154.795279][ T7440] Invalid ELF header magic: != ELF [ 156.308199][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 156.308220][ T29] audit: type=1804 audit(4295032900.012:69): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.288" name="/newroot/85/file0" dev="tmpfs" ino=462 res=1 errno=0 [ 156.355837][ T7483] XFS: Clearing xfsstats [ 157.391050][ T7522] netlink: 25 bytes leftover after parsing attributes in process `syz.3.296'. [ 157.905159][ T7532] XFS: Clearing xfsstats [ 159.304162][ T7580] Console: switching to colour frame buffer device 128x48 [ 159.364876][ T29] audit: type=1107 audit(4295033926.074:70): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 159.368804][ T29] audit: type=1107 audit(4295033926.074:71): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.905311][ T7640] netlink: 'syz.3.318': attribute type 11 has an invalid length. [ 161.550641][ T7656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 161.562305][ T7656] bridge0: port 3(team0) entered disabled state [ 161.574603][ T7656] team0 (unregistering): left allmulticast mode [ 161.574632][ T7656] team_slave_0: left allmulticast mode [ 161.574653][ T7656] team_slave_1: left allmulticast mode [ 161.574674][ T7656] team0 (unregistering): left promiscuous mode [ 161.574776][ T7656] team_slave_0: left promiscuous mode [ 161.575002][ T7656] team_slave_1: left promiscuous mode [ 161.575281][ T7656] bridge0: port 3(team0) entered disabled state [ 161.596741][ T7656] team0 (unregistering): Port device team_slave_0 removed [ 161.605597][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 161.608540][ T7656] team0 (unregistering): Port device team_slave_1 removed [ 162.519852][ T7664] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 163.071375][ T7682] hub 1-0:1.0: USB hub found [ 163.090974][ T7682] hub 1-0:1.0: 1 port detected [ 165.237674][ T29] audit: type=1804 audit(4295033931.941:72): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.340" name="/newroot/86/file0" dev="tmpfs" ino=483 res=1 errno=0 [ 165.313818][ T7718] zswap: compressor not available [ 165.580333][ T7735] netlink: 334 bytes leftover after parsing attributes in process `syz.0.342'. [ 165.604588][ T7735] netlink: 334 bytes leftover after parsing attributes in process `syz.0.342'. [ 165.753137][ T7738] Invalid ELF header magic: != ELF [ 167.395386][ T7771] bond0: invalid ARP target specified [ 167.423917][ T7771] bond0: invalid ARP target specified [ 167.510805][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.349'. [ 167.535438][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.553221][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.590993][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.667835][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.928569][ T7787] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 168.512836][ T7808] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 169.223233][ T7814] Invalid ELF header magic: != ELF [ 169.522768][ T7836] vivid-007: ================= START STATUS ================= [ 169.532192][ T7836] vivid-007: Generate PTS: true [ 169.540266][ T7836] vivid-007: Generate SCR: true [ 169.545393][ T7836] tpg source WxH: 320x240 (Y'CbCr) [ 169.552359][ T7836] tpg field: 1 [ 169.556389][ T7836] tpg crop: (0,0)/320x240 [ 169.561080][ T7836] tpg compose: (0,0)/320x240 [ 169.566829][ T7836] tpg colorspace: 8 [ 169.570709][ T7836] tpg transfer function: 0/0 [ 169.624025][ T7836] tpg Y'CbCr encoding: 0/0 [ 169.632576][ T7836] tpg quantization: 0/0 [ 169.656173][ T7836] tpg RGB range: 0/2 [ 169.660130][ T7836] vivid-007: ================== END STATUS ================== [ 170.155902][ T29] audit: type=1800 audit(4295033936.849:73): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.369" name="dbroot" dev="configfs" ino=17271 res=0 errno=0 [ 170.176549][ T7846] netlink: set zone limit has 8 unknown bytes [ 170.199914][ T7854] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 170.216468][ T7854] db_root: cannot open: /dev/audio1 [ 170.326314][ T7846] netlink: set zone limit has 8 unknown bytes [ 170.354397][ T7846] netlink: set zone limit has 8 unknown bytes [ 170.405812][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 170.441475][ T7846] netlink: set zone limit has 8 unknown bytes [ 170.479712][ T7846] netlink: set zone limit has 8 unknown bytes [ 170.570215][ T7846] netlink: set zone limit has 8 unknown bytes [ 170.669606][ T7846] netlink: set zone limit has 8 unknown bytes [ 170.714341][ T7868] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 170.720231][ T7846] netlink: set zone limit has 8 unknown bytes [ 171.087773][ T7885] FAULT_INJECTION: forcing a failure. [ 171.087773][ T7885] name failslab, interval 1, probability 0, space 0, times 0 [ 171.122944][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.3.378 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.122990][ T7885] Tainted: [L]=SOFTLOCKUP [ 171.123001][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.123018][ T7885] Call Trace: [ 171.123047][ T7885] [ 171.123059][ T7885] dump_stack_lvl+0x100/0x190 [ 171.123109][ T7885] should_fail_ex.cold+0x5/0xa [ 171.123143][ T7885] should_failslab+0xc2/0x120 [ 171.123169][ T7885] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 171.123214][ T7885] ? kasprintf+0xc7/0x100 [ 171.123240][ T7885] ? __lock_acquire+0x4a5/0x2630 [ 171.123279][ T7885] kvasprintf+0xbc/0x150 [ 171.123324][ T7885] ? __pfx_kvasprintf+0x10/0x10 [ 171.123380][ T7885] kasprintf+0xc7/0x100 [ 171.123404][ T7885] ? __pfx_kasprintf+0x10/0x10 [ 171.123445][ T7885] ? __is_module_percpu_address+0x1c2/0x430 [ 171.123488][ T7885] alloc_workqueue_noprof+0x114/0x200 [ 171.123521][ T7885] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 171.123558][ T7885] ? irqentry_exit+0x180/0x670 [ 171.123588][ T7885] ? lockdep_hardirqs_on+0x78/0x100 [ 171.123626][ T7885] nci_register_device+0x394/0xb80 [ 171.123669][ T7885] ? __pfx_nci_register_device+0x10/0x10 [ 171.123714][ T7885] ? lockdep_init_map_type+0x5c/0x250 [ 171.123756][ T7885] virtual_ncidev_open+0x141/0x220 [ 171.123786][ T7885] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 171.123813][ T7885] misc_open+0x26d/0x450 [ 171.123855][ T7885] ? __pfx_misc_open+0x10/0x10 [ 171.123896][ T7885] chrdev_open+0x234/0x6a0 [ 171.123921][ T7885] ? __pfx_apparmor_file_open+0x10/0x10 [ 171.123960][ T7885] ? __pfx_chrdev_open+0x10/0x10 [ 171.123985][ T7885] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 171.124038][ T7885] do_dentry_open+0x6d8/0x1660 [ 171.124080][ T7885] ? __pfx_chrdev_open+0x10/0x10 [ 171.124111][ T7885] vfs_open+0x82/0x3f0 [ 171.124147][ T7885] path_openat+0x208c/0x31a0 [ 171.124185][ T7885] ? __pfx_path_openat+0x10/0x10 [ 171.124224][ T7885] do_file_open+0x20e/0x430 [ 171.124253][ T7885] ? __pfx_do_file_open+0x10/0x10 [ 171.124307][ T7885] ? alloc_fd+0x476/0x790 [ 171.124354][ T7885] ? do_getname+0x191/0x390 [ 171.124391][ T7885] do_sys_openat2+0x10d/0x1e0 [ 171.124426][ T7885] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.124474][ T7885] __x64_sys_openat+0x12d/0x210 [ 171.124507][ T7885] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.124551][ T7885] do_syscall_64+0x106/0xf80 [ 171.124576][ T7885] ? clear_bhb_loop+0x40/0x90 [ 171.124606][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.124633][ T7885] RIP: 0033:0x7fd55db9c629 [ 171.124657][ T7885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.124683][ T7885] RSP: 002b:00007fd55ea16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.124707][ T7885] RAX: ffffffffffffffda RBX: 00007fd55de15fa0 RCX: 00007fd55db9c629 [ 171.124724][ T7885] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 171.124740][ T7885] RBP: 00007fd55dc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 171.124757][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.124772][ T7885] R13: 00007fd55de16038 R14: 00007fd55de15fa0 R15: 00007fff97f89758 [ 171.124808][ T7885] [ 171.543106][ T29] audit: type=1804 audit(4295033938.248:74): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.379" name="/newroot/84/file0" dev="tmpfs" ino=449 res=1 errno=0 [ 171.871203][ T7908] binder: 7907:7908 ioctl c018620c 0 returned -22 [ 172.377779][ T7922] nbd: must specify a device to reconfigure [ 173.175000][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d12fc00: rx timeout, send abort [ 173.665739][ T29] audit: type=1804 audit(4295033940.367:75): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.390" name="/newroot/107/file0" dev="tmpfs" ino=592 res=1 errno=0 [ 173.684716][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d12fc00: abort rx timeout. Force session deactivation [ 173.856415][ T7948] XFS: Clearing xfsstats [ 174.182920][ T7951] zswap: compressor not available [ 174.407736][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 174.425902][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 174.968500][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 175.099545][ T29] audit: type=1804 audit(4295033941.806:76): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.399" name="/newroot/113/file0" dev="tmpfs" ino=623 res=1 errno=0 [ 175.150864][ T7986] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.400'. [ 175.360701][ T7991] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 175.378097][ T7991] XFS: Clearing xfsstats [ 176.077746][ T8018] ovs_: entered promiscuous mode [ 176.889511][ T29] audit: type=1804 audit(4295033943.575:77): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.410" name="/newroot/96/file0" dev="tmpfs" ino=523 res=1 errno=0 [ 177.159006][ T8041] zswap: compressor not available [ 177.323598][ T29] audit: type=1804 audit(4295033944.025:78): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.423" name="/newroot/97/file0" dev="tmpfs" ino=529 res=1 errno=0 [ 177.625192][ T8064] FAULT_INJECTION: forcing a failure. [ 177.625192][ T8064] name fail_futex, interval 1, probability 0, space 0, times 1 [ 177.668339][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.0.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.668378][ T8064] Tainted: [L]=SOFTLOCKUP [ 177.668386][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.668400][ T8064] Call Trace: [ 177.668408][ T8064] [ 177.668417][ T8064] dump_stack_lvl+0x100/0x190 [ 177.668465][ T8064] should_fail_ex.cold+0x5/0xa [ 177.668495][ T8064] get_futex_key+0x1d2/0x1620 [ 177.668528][ T8064] ? __pfx_get_futex_key+0x10/0x10 [ 177.668570][ T8064] futex_wait_setup+0x81/0x500 [ 177.668616][ T8064] __futex_wait+0x19f/0x300 [ 177.668654][ T8064] ? __pfx___futex_wait+0x10/0x10 [ 177.668695][ T8064] ? __pfx_futex_wake_mark+0x10/0x10 [ 177.668738][ T8064] ? futex_hash+0x2c5/0x380 [ 177.668778][ T8064] futex_wait+0xed/0x380 [ 177.668816][ T8064] ? __pfx_futex_wait+0x10/0x10 [ 177.668862][ T8064] ? find_held_lock+0x2b/0x80 [ 177.668886][ T8064] ? __fget_files+0x215/0x3d0 [ 177.668926][ T8064] do_futex+0x1ef/0x350 [ 177.668959][ T8064] ? __pfx_do_futex+0x10/0x10 [ 177.669000][ T8064] __x64_sys_futex+0x34f/0x4d0 [ 177.669031][ T8064] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 177.669056][ T8064] ? __pfx___x64_sys_futex+0x10/0x10 [ 177.669097][ T8064] do_syscall_64+0x106/0xf80 [ 177.669132][ T8064] ? clear_bhb_loop+0x40/0x90 [ 177.669164][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.669191][ T8064] RIP: 0033:0x7f964059c629 [ 177.669214][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.669239][ T8064] RSP: 002b:00007f96414670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 177.669265][ T8064] RAX: ffffffffffffffda RBX: 00007f9640816098 RCX: 00007f964059c629 [ 177.669283][ T8064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9640816098 [ 177.669298][ T8064] RBP: 00007f9640816090 R08: 0000000000000000 R09: 0000000000000000 [ 177.669314][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.669330][ T8064] R13: 00007f9640816128 R14: 00007fffbd1f29e0 R15: 00007fffbd1f2ac8 [ 177.669365][ T8064] [ 178.195997][ T8069] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 179.079642][ T29] audit: type=1804 audit(4295033945.774:79): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.426" name="/newroot/102/file0" dev="tmpfs" ino=543 res=1 errno=0 [ 179.166451][ T8097] Invalid ELF header magic: != ELF [ 180.005169][ T8124] cougar: G6 mapped to F18 [ 180.324239][ T8133] input: jJǸ-9%vJ86 as /devices/virtual/input/input10 [ 180.936777][ T8139] FAULT_INJECTION: forcing a failure. [ 180.936777][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 180.949861][ T8139] CPU: 1 UID: 0 PID: 8139 Comm: syz.0.436 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.949902][ T8139] Tainted: [L]=SOFTLOCKUP [ 180.949911][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.949927][ T8139] Call Trace: [ 180.949936][ T8139] [ 180.949945][ T8139] dump_stack_lvl+0x100/0x190 [ 180.949971][ T8139] should_fail_ex.cold+0x5/0xa [ 180.949989][ T8139] should_failslab+0xc2/0x120 [ 180.950003][ T8139] __kmalloc_cache_noprof+0x7a/0x6f0 [ 180.950021][ T8139] ? __do_sys_getcwd+0xe5/0x960 [ 180.950038][ T8139] ? do_futex+0x192/0x350 [ 180.950060][ T8139] __do_sys_getcwd+0xe5/0x960 [ 180.950080][ T8139] ? __x64_sys_futex+0x34f/0x4d0 [ 180.950098][ T8139] ? __x64_sys_futex+0x358/0x4d0 [ 180.950115][ T8139] ? __pfx___do_sys_getcwd+0x10/0x10 [ 180.950134][ T8139] ? __pfx___x64_sys_futex+0x10/0x10 [ 180.950161][ T8139] do_syscall_64+0x106/0xf80 [ 180.950177][ T8139] ? clear_bhb_loop+0x40/0x90 [ 180.950195][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.950210][ T8139] RIP: 0033:0x7f964059c629 [ 180.950223][ T8139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.950236][ T8139] RSP: 002b:00007f9641488028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 180.950251][ T8139] RAX: ffffffffffffffda RBX: 00007f9640815fa0 RCX: 00007f964059c629 [ 180.950261][ T8139] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 180.950269][ T8139] RBP: 00007f9640632b39 R08: 0000000000000000 R09: 0000000000000000 [ 180.950277][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.950285][ T8139] R13: 00007f9640816038 R14: 00007f9640815fa0 R15: 00007fffbd1f2ac8 [ 180.950304][ T8139] [ 182.635765][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 182.656654][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 182.848343][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac7b800: rx timeout, send abort [ 182.856931][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ac7b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 183.242953][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'. [ 183.251952][ T8195] bridge_slave_1: left allmulticast mode [ 183.283231][ T8195] bridge_slave_1: left promiscuous mode [ 183.289094][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.308562][ T8195] bridge_slave_0: left allmulticast mode [ 183.315335][ T8195] bridge_slave_0: left promiscuous mode [ 183.321202][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.107235][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 186.126001][ T8278] binder: 8275:8278 ioctl 4018620d 9 returned -22 [ 186.295584][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.314323][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.323788][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.339168][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.347774][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.666729][ T8292] FAULT_INJECTION: forcing a failure. [ 186.666729][ T8292] name failslab, interval 1, probability 0, space 0, times 0 [ 186.751126][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.2.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.751175][ T8292] Tainted: [L]=SOFTLOCKUP [ 186.751185][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.751206][ T8292] Call Trace: [ 186.751215][ T8292] [ 186.751231][ T8292] dump_stack_lvl+0x100/0x190 [ 186.751282][ T8292] should_fail_ex.cold+0x5/0xa [ 186.751317][ T8292] should_failslab+0xc2/0x120 [ 186.751346][ T8292] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 186.751391][ T8292] ? fib_notifier_ops_register+0x32/0x270 [ 186.751425][ T8292] ? __debug_object_init+0x2de/0x3d0 [ 186.751470][ T8292] kmemdup_noprof+0x29/0x60 [ 186.751514][ T8292] fib_notifier_ops_register+0x32/0x270 [ 186.751553][ T8292] fib4_notifier_init+0x4f/0xd0 [ 186.751586][ T8292] fib_net_init+0xbf/0x3f0 [ 186.751617][ T8292] ? is_module_address+0x69/0xf0 [ 186.751652][ T8292] ? __pfx_fib_net_init+0x10/0x10 [ 186.751684][ T8292] ? timer_init_key+0x150/0x340 [ 186.751720][ T8292] ? devinet_init_net+0x56c/0x8d0 [ 186.751761][ T8292] ? __pfx_fib_net_init+0x10/0x10 [ 186.751792][ T8292] ops_init+0x1e2/0x5f0 [ 186.751829][ T8292] setup_net+0x118/0x3a0 [ 186.751863][ T8292] ? __pfx_setup_net+0x10/0x10 [ 186.751903][ T8292] ? lockdep_init_map_type+0x5c/0x250 [ 186.751942][ T8292] ? mutex_init_lockep+0x110/0x150 [ 186.751987][ T8292] copy_net_ns+0x46f/0x7c0 [ 186.752030][ T8292] create_new_namespaces+0x3ea/0xac0 [ 186.752069][ T8292] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 186.752103][ T8292] ksys_unshare+0x455/0xab0 [ 186.752141][ T8292] ? __pfx_ksys_unshare+0x10/0x10 [ 186.752191][ T8292] __x64_sys_unshare+0x31/0x40 [ 186.752225][ T8292] do_syscall_64+0x106/0xf80 [ 186.752256][ T8292] ? clear_bhb_loop+0x40/0x90 [ 186.752292][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.752321][ T8292] RIP: 0033:0x7f93c539c629 [ 186.752346][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.752372][ T8292] RSP: 002b:00007f93c62ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 186.752407][ T8292] RAX: ffffffffffffffda RBX: 00007f93c5615fa0 RCX: 00007f93c539c629 [ 186.752426][ T8292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 186.752443][ T8292] RBP: 00007f93c5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 186.752478][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.752495][ T8292] R13: 00007f93c5616038 R14: 00007f93c5615fa0 R15: 00007ffdad0a12d8 [ 186.752534][ T8292] [ 187.530882][ T8286] chnl_net:caif_netlink_parms(): no params data found [ 187.790768][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.798081][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.805459][ T8286] bridge_slave_0: entered allmulticast mode [ 187.813384][ T8286] bridge_slave_0: entered promiscuous mode [ 187.822297][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.830027][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.841352][ T8286] bridge_slave_1: entered allmulticast mode [ 187.849735][ T8286] bridge_slave_1: entered promiscuous mode [ 187.946378][ T8286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.994009][ T8286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.049599][ T8324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.474'. [ 188.091708][ T8286] team0: Port device team_slave_0 added [ 188.108593][ T8286] team0: Port device team_slave_1 added [ 188.243809][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.291961][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.354844][ T8286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.409307][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.421061][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.425809][ T5836] Bluetooth: hci4: command tx timeout [ 188.484341][ T8286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.677333][ T8286] hsr_slave_0: entered promiscuous mode [ 188.705619][ T8286] hsr_slave_1: entered promiscuous mode [ 188.711816][ T8286] debugfs: 'hsr0' already exists in 'hsr' [ 188.757036][ T8286] Cannot create hsr debugfs directory [ 189.316736][ T8329] : entered promiscuous mode [ 190.002385][ T8286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.068325][ T8286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.105521][ T8286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.135465][ T8286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.146103][ T8348] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.398405][ T8286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.470709][ T8286] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.484778][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.492042][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.496374][ T5836] Bluetooth: hci4: command tx timeout [ 190.562212][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.562301][ T6489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.718940][ T8374] Invalid ELF header magic: != ELF [ 191.177591][ T8286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.912349][ T8286] veth0_vlan: entered promiscuous mode [ 191.935580][ T8286] veth1_vlan: entered promiscuous mode [ 192.008428][ T8286] veth0_macvtap: entered promiscuous mode [ 192.033451][ T8286] veth1_macvtap: entered promiscuous mode [ 192.071586][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.091245][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.118304][ T6230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.142796][ T6230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.161168][ T6230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.199103][ T6230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.264517][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.280960][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.422615][ T6489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.457483][ T6489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.578044][ T5836] Bluetooth: hci4: command tx timeout [ 193.688398][ T8426] Invalid ELF header magic: != ELF [ 194.424580][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436817][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.658386][ T5836] Bluetooth: hci4: command tx timeout [ 194.692630][ T8458] FAULT_INJECTION: forcing a failure. [ 194.692630][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 194.710032][ T8458] CPU: 1 UID: 0 PID: 8458 Comm: syz.2.505 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.710080][ T8458] Tainted: [L]=SOFTLOCKUP [ 194.710089][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.710105][ T8458] Call Trace: [ 194.710117][ T8458] [ 194.710136][ T8458] dump_stack_lvl+0x100/0x190 [ 194.710185][ T8458] should_fail_ex.cold+0x5/0xa [ 194.710223][ T8458] should_failslab+0xc2/0x120 [ 194.710251][ T8458] __kvmalloc_node_noprof+0xfa/0xa00 [ 194.710296][ T8458] ? io_alloc_cache_init+0x38/0x170 [ 194.710333][ T8458] ? io_alloc_cache_init+0x38/0x170 [ 194.710380][ T8458] io_alloc_cache_init+0x38/0x170 [ 194.710424][ T8458] io_rsrc_cache_init+0x26/0x50 [ 194.710460][ T8458] io_uring_setup.cold+0x43d/0x1d09 [ 194.710511][ T8458] ? __pfx_io_uring_setup+0x10/0x10 [ 194.710543][ T8458] ? do_futex+0x192/0x350 [ 194.710585][ T8458] ? __pfx_do_futex+0x10/0x10 [ 194.710641][ T8458] ? xfd_validate_state+0x129/0x190 [ 194.710694][ T8458] __x64_sys_io_uring_setup+0xc2/0x170 [ 194.710727][ T8458] do_syscall_64+0x106/0xf80 [ 194.710759][ T8458] ? clear_bhb_loop+0x40/0x90 [ 194.710795][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.710824][ T8458] RIP: 0033:0x7f93c539c629 [ 194.710851][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.710877][ T8458] RSP: 002b:00007f93c62ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 194.710908][ T8458] RAX: ffffffffffffffda RBX: 00007f93c5615fa0 RCX: 00007f93c539c629 [ 194.710930][ T8458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 194.710946][ T8458] RBP: 00007f93c5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 194.710964][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.710982][ T8458] R13: 00007f93c5616038 R14: 00007f93c5615fa0 R15: 00007ffdad0a12d8 [ 194.711026][ T8458] [ 196.154914][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 196.639305][ T8497] futex_wake_op: syz.3.515 tries to shift op by -2048; fix this program [ 197.504086][ T8518] futex_wake_op: syz.4.519 tries to shift op by -2048; fix this program [ 197.518597][ T8518] futex_wake_op: syz.4.519 tries to shift op by -2048; fix this program [ 198.611862][ T8544] FAULT_INJECTION: forcing a failure. [ 198.611862][ T8544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.625471][ T8544] CPU: 1 UID: 0 PID: 8544 Comm: syz.2.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.625516][ T8544] Tainted: [L]=SOFTLOCKUP [ 198.625525][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.625542][ T8544] Call Trace: [ 198.625551][ T8544] [ 198.625562][ T8544] dump_stack_lvl+0x100/0x190 [ 198.625610][ T8544] should_fail_ex.cold+0x5/0xa [ 198.625639][ T8544] ? prepare_alloc_pages+0x16d/0x5f0 [ 198.625673][ T8544] should_fail_alloc_page+0xeb/0x140 [ 198.625704][ T8544] prepare_alloc_pages+0x1f0/0x5f0 [ 198.625742][ T8544] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 198.625784][ T8544] ? __pfx_css_rstat_updated+0x10/0x10 [ 198.625818][ T8544] ? lock_acquire+0x1cf/0x380 [ 198.625869][ T8544] ? rcu_is_watching+0x12/0xc0 [ 198.625913][ T8544] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 198.625955][ T8544] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.625996][ T8544] ? rcu_read_unlock+0x17/0x60 [ 198.626036][ T8544] ? folio_remove_rmap_pmd+0x69c/0xed0 [ 198.626078][ T8544] ? split_huge_pmd_locked+0x3ba/0x3cf0 [ 198.626114][ T8544] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.626160][ T8544] ? policy_nodemask+0xed/0x4f0 [ 198.626190][ T8544] alloc_pages_mpol+0x1fb/0x550 [ 198.626219][ T8544] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 198.626244][ T8544] ? __split_huge_pmd+0x203/0x350 [ 198.626277][ T8544] ? __split_huge_pmd+0x203/0x350 [ 198.626320][ T8544] alloc_pages_noprof+0x131/0x390 [ 198.626350][ T8544] pte_alloc_one+0x1e/0x3e0 [ 198.626383][ T8544] __pte_alloc+0x6d/0x3f0 [ 198.626409][ T8544] ? __pfx___pte_alloc+0x10/0x10 [ 198.626439][ T8544] ? _raw_spin_unlock+0x28/0x50 [ 198.626485][ T8544] ? __pmd_alloc+0x6aa/0x9c0 [ 198.626519][ T8544] move_page_tables+0x257e/0x4500 [ 198.626561][ T8544] ? __pfx_copy_vma+0x10/0x10 [ 198.626612][ T8544] ? __pfx_move_page_tables+0x10/0x10 [ 198.626679][ T8544] copy_vma_and_data+0x25c/0x7c0 [ 198.626721][ T8544] ? __pfx_copy_vma_and_data+0x10/0x10 [ 198.626776][ T8544] ? __vma_start_write+0x17f/0x280 [ 198.626810][ T8544] ? __pfx___vma_start_write+0x10/0x10 [ 198.626860][ T8544] move_vma+0x51b/0x1890 [ 198.626906][ T8544] ? __pfx_move_vma+0x10/0x10 [ 198.626949][ T8544] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 198.626979][ T8544] ? cap_mmap_addr+0x4b/0x120 [ 198.627014][ T8544] ? bpf_lsm_mmap_addr+0x9/0x30 [ 198.627055][ T8544] ? security_mmap_addr+0x71/0x1e0 [ 198.627098][ T8544] ? __get_unmapped_area+0x255/0x3e0 [ 198.627131][ T8544] ? vrm_set_new_addr+0x204/0x290 [ 198.627172][ T8544] mremap_to+0x1b7/0x450 [ 198.627212][ T8544] do_mremap+0xb76/0x2130 [ 198.627267][ T8544] ? __pfx_do_mremap+0x10/0x10 [ 198.627314][ T8544] ? ksys_write+0x190/0x250 [ 198.627364][ T8544] __do_sys_mremap+0x126/0x170 [ 198.627404][ T8544] ? __pfx___do_sys_mremap+0x10/0x10 [ 198.627452][ T8544] ? __x64_sys_futex+0x34f/0x4d0 [ 198.627511][ T8544] do_syscall_64+0x106/0xf80 [ 198.627541][ T8544] ? clear_bhb_loop+0x40/0x90 [ 198.627575][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.627604][ T8544] RIP: 0033:0x7f93c539c629 [ 198.627628][ T8544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.627655][ T8544] RSP: 002b:00007f93c62ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 198.627681][ T8544] RAX: ffffffffffffffda RBX: 00007f93c5615fa0 RCX: 00007f93c539c629 [ 198.627697][ T8544] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 198.627713][ T8544] RBP: 00007f93c5432b39 R08: 0000000100000000 R09: 0000000000000000 [ 198.627729][ T8544] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 198.627746][ T8544] R13: 00007f93c5616038 R14: 00007f93c5615fa0 R15: 00007ffdad0a12d8 [ 198.627784][ T8544] [ 199.768891][ T8565] netlink: 334 bytes leftover after parsing attributes in process `syz.4.532'. [ 201.624946][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 201.625397][ T5141] Bluetooth: hci2: command 0x2016 tx timeout [ 201.631030][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 201.832332][ T8606] zswap: compressor not available [ 202.040204][ T8618] futex_wake_op: syz.3.544 tries to shift op by -2048; fix this program [ 202.049882][ T8625] ima: policy update failed [ 202.061959][ T29] audit: type=1802 audit(4295033968.743:80): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.546" res=0 errno=0 [ 202.069485][ T8625] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 202.092444][ T8618] futex_wake_op: syz.3.544 tries to shift op by -2048; fix this program [ 203.498810][ T29] audit: type=1804 audit(4295033970.182:81): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.556" name="/newroot/146/file0" dev="tmpfs" ino=774 res=1 errno=0 [ 204.612438][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 204.645087][ T8694] unsupported nlmsg_type 40 [ 205.191660][ T8709] Invalid ELF header magic: != ELF [ 206.245773][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.256698][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.274567][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.304263][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.318781][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.963994][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 207.245732][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.252980][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.260844][ T8731] bridge_slave_0: entered allmulticast mode [ 207.269845][ T8731] bridge_slave_0: entered promiscuous mode [ 207.279987][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.288291][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.296223][ T8731] bridge_slave_1: entered allmulticast mode [ 207.305451][ T8731] bridge_slave_1: entered promiscuous mode [ 207.358057][ T8757] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 207.429517][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.441887][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.658283][ T8731] team0: Port device team_slave_0 added [ 207.782742][ T8731] team0: Port device team_slave_1 added [ 207.969332][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.990333][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.017428][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.094007][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.115863][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.176559][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.300841][ T8784] Invalid ELF header magic: != ELF [ 208.425262][ T5836] Bluetooth: hci1: command tx timeout [ 208.542461][ T8731] hsr_slave_0: entered promiscuous mode [ 208.829737][ T8731] hsr_slave_1: entered promiscuous mode [ 208.837004][ T8731] debugfs: 'hsr0' already exists in 'hsr' [ 208.842836][ T8731] Cannot create hsr debugfs directory [ 209.709705][ T8731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.823669][ T8731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.841007][ T8731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.892734][ T8731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.437152][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.462445][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.488958][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.496140][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.506401][ T5836] Bluetooth: hci1: command tx timeout [ 210.558238][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.565474][ T6230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.863645][ T8840] bond0: invalid ARP target specified [ 210.952286][ T8842] bridge0: port 3(gretap0) entered blocking state [ 210.961080][ T8842] bridge0: port 3(gretap0) entered disabled state [ 210.969050][ T8842] gretap0: entered allmulticast mode [ 211.039931][ T8842] gretap0: entered promiscuous mode [ 211.047265][ T8842] bridge0: port 3(gretap0) entered blocking state [ 211.053870][ T8842] bridge0: port 3(gretap0) entered forwarding state [ 211.439033][ T8848] zswap: compressor not available [ 211.708100][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.049809][ T8877] netlink: 334 bytes leftover after parsing attributes in process `syz.3.604'. [ 212.510358][ T8731] veth0_vlan: entered promiscuous mode [ 212.590773][ T5836] Bluetooth: hci1: command tx timeout [ 212.719379][ T8731] veth1_vlan: entered promiscuous mode [ 212.823466][ T8731] veth0_macvtap: entered promiscuous mode [ 212.839100][ T8731] veth1_macvtap: entered promiscuous mode [ 212.952949][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.999627][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.043719][ T6489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.154000][ T6489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.173115][ T6489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.204571][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 213.419741][ T6489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.646357][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.677724][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.717154][ T6230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.730885][ T6230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.642218][ T8939] FAULT_INJECTION: forcing a failure. [ 214.642218][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 214.669906][ T5836] Bluetooth: hci1: command tx timeout [ 214.696700][ T8939] CPU: 0 UID: 0 PID: 8939 Comm: syz.5.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.696728][ T8939] Tainted: [L]=SOFTLOCKUP [ 214.696733][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.696742][ T8939] Call Trace: [ 214.696748][ T8939] [ 214.696754][ T8939] dump_stack_lvl+0x100/0x190 [ 214.696781][ T8939] should_fail_ex.cold+0x5/0xa [ 214.696799][ T8939] should_failslab+0xc2/0x120 [ 214.696814][ T8939] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 214.696835][ T8939] ? __d_alloc+0x34/0xa80 [ 214.696854][ T8939] __d_alloc+0x34/0xa80 [ 214.696871][ T8939] d_alloc_pseudo+0x1c/0xc0 [ 214.696891][ T8939] alloc_file_pseudo+0xcf/0x230 [ 214.696910][ T8939] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 214.696932][ T8939] __shmem_file_setup+0x221/0x490 [ 214.696952][ T8939] ? __pfx___shmem_file_setup+0x10/0x10 [ 214.696973][ T8939] ? vm_area_alloc+0x1f/0x160 [ 214.696993][ T8939] shmem_zero_setup+0x96/0x1b0 [ 214.697015][ T8939] __mmap_region+0x2198/0x29e0 [ 214.697037][ T8939] ? process_measurement+0x2ec/0x2350 [ 214.697064][ T8939] ? __pfx___mmap_region+0x10/0x10 [ 214.697082][ T8939] ? process_measurement+0x1f4/0x2350 [ 214.697105][ T8939] ? kvm_sched_clock_read+0x11/0x20 [ 214.697121][ T8939] ? sched_clock+0x38/0x60 [ 214.697144][ T8939] ? __lock_acquire+0x4a5/0x2630 [ 214.697170][ T8939] ? find_held_lock+0x2b/0x80 [ 214.697183][ T8939] ? finish_task_switch.isra.0+0x200/0xb80 [ 214.697199][ T8939] ? finish_task_switch.isra.0+0x200/0xb80 [ 214.697222][ T8939] ? trace_sched_exit_tp+0x13a/0x180 [ 214.697238][ T8939] ? __schedule+0x1000/0x60e0 [ 214.697277][ T8939] ? rcu_is_watching+0x12/0xc0 [ 214.697298][ T8939] ? cap_capable+0x107/0x460 [ 214.697323][ T8939] mmap_region+0x180/0x3e0 [ 214.697347][ T8939] do_mmap+0xc63/0x12f0 [ 214.697365][ T8939] ? __pfx_do_mmap+0x10/0x10 [ 214.697380][ T8939] ? __pfx_down_write_killable+0x10/0x10 [ 214.697402][ T8939] vm_mmap_pgoff+0x29e/0x470 [ 214.697421][ T8939] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 214.697437][ T8939] ? do_futex+0x192/0x350 [ 214.697456][ T8939] ? __pfx_do_futex+0x10/0x10 [ 214.697473][ T8939] ? rcu_is_watching+0x12/0xc0 [ 214.697496][ T8939] ksys_mmap_pgoff+0xe1/0x650 [ 214.697510][ T8939] ? __x64_sys_futex+0x34f/0x4d0 [ 214.697527][ T8939] ? __x64_sys_futex+0x358/0x4d0 [ 214.697545][ T8939] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 214.697560][ T8939] ? xfd_validate_state+0x129/0x190 [ 214.697584][ T8939] __x64_sys_mmap+0x125/0x190 [ 214.697606][ T8939] do_syscall_64+0x106/0xf80 [ 214.697622][ T8939] ? clear_bhb_loop+0x40/0x90 [ 214.697640][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.697655][ T8939] RIP: 0033:0x7f3be619c629 [ 214.697669][ T8939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.697683][ T8939] RSP: 002b:00007f3be43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.697697][ T8939] RAX: ffffffffffffffda RBX: 00007f3be6415fa0 RCX: 00007f3be619c629 [ 214.697707][ T8939] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 214.697716][ T8939] RBP: 00007f3be6232b39 R08: 0000000000000401 R09: 0000000000008000 [ 214.697725][ T8939] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 214.697733][ T8939] R13: 00007f3be6416038 R14: 00007f3be6415fa0 R15: 00007ffff67d6dc8 [ 214.697753][ T8939] [ 215.272661][ T29] audit: type=1804 audit(4295033981.956:82): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.623" name="/newroot/sys/kernel/debug/tracing/trace_marker_raw" dev="tracefs" ino=971 res=1 errno=0 [ 215.654446][ T8973] cgroup: fork rejected by pids controller in /syz2 [ 216.467919][ T29] audit: type=1804 audit(4295033983.146:83): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.632" name="/newroot/168/file0" dev="tmpfs" ino=893 res=1 errno=0 [ 217.318364][ T9078] FAULT_INJECTION: forcing a failure. [ 217.318364][ T9078] name failslab, interval 1, probability 0, space 0, times 0 [ 217.392551][ T9078] CPU: 1 UID: 0 PID: 9078 Comm: syz.2.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.392595][ T9078] Tainted: [L]=SOFTLOCKUP [ 217.392604][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.392620][ T9078] Call Trace: [ 217.392628][ T9078] [ 217.392638][ T9078] dump_stack_lvl+0x100/0x190 [ 217.392684][ T9078] should_fail_ex.cold+0x5/0xa [ 217.392715][ T9078] ? cache_create_net+0xa2/0x1f0 [ 217.392744][ T9078] should_failslab+0xc2/0x120 [ 217.392772][ T9078] __kmalloc_noprof+0xe0/0x850 [ 217.392821][ T9078] cache_create_net+0xa2/0x1f0 [ 217.392855][ T9078] gss_svc_init_net+0x11f/0x640 [ 217.392882][ T9078] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 217.392928][ T9078] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 217.392960][ T9078] ops_init+0x1e2/0x5f0 [ 217.392997][ T9078] setup_net+0x118/0x3a0 [ 217.393031][ T9078] ? __pfx_setup_net+0x10/0x10 [ 217.393062][ T9078] ? lockdep_init_map_type+0x5c/0x250 [ 217.393101][ T9078] ? mutex_init_lockep+0x110/0x150 [ 217.393144][ T9078] copy_net_ns+0x46f/0x7c0 [ 217.393183][ T9078] create_new_namespaces+0x3ea/0xac0 [ 217.393221][ T9078] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 217.393255][ T9078] ksys_unshare+0x455/0xab0 [ 217.393293][ T9078] ? __pfx_ksys_unshare+0x10/0x10 [ 217.393342][ T9078] __x64_sys_unshare+0x31/0x40 [ 217.393377][ T9078] do_syscall_64+0x106/0xf80 [ 217.393407][ T9078] ? clear_bhb_loop+0x40/0x90 [ 217.393443][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.393472][ T9078] RIP: 0033:0x7f93c539c629 [ 217.393495][ T9078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.393521][ T9078] RSP: 002b:00007f93c62a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 217.393548][ T9078] RAX: ffffffffffffffda RBX: 00007f93c5616090 RCX: 00007f93c539c629 [ 217.393566][ T9078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 217.393583][ T9078] RBP: 00007f93c5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 217.393600][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.393616][ T9078] R13: 00007f93c5616128 R14: 00007f93c5616090 R15: 00007ffdad0a12d8 [ 217.393656][ T9078] [ 217.714447][ T9083] FAULT_INJECTION: forcing a failure. [ 217.714447][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 217.754055][ T9083] CPU: 0 UID: 0 PID: 9083 Comm: syz.5.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.754099][ T9083] Tainted: [L]=SOFTLOCKUP [ 217.754107][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.754127][ T9083] Call Trace: [ 217.754136][ T9083] [ 217.754146][ T9083] dump_stack_lvl+0x100/0x190 [ 217.754187][ T9083] should_fail_ex.cold+0x5/0xa [ 217.754220][ T9083] should_failslab+0xc2/0x120 [ 217.754247][ T9083] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 217.754284][ T9083] ? mas_alloc_nodes+0x280/0x390 [ 217.754336][ T9083] mas_alloc_nodes+0x280/0x390 [ 217.754384][ T9083] mas_preallocate+0x39c/0xf10 [ 217.754415][ T9083] ? __memcg_slab_post_alloc_hook+0x4c0/0x9a0 [ 217.754452][ T9083] ? __pfx_mas_preallocate+0x10/0x10 [ 217.754497][ T9083] ? anon_vma_name+0x5a/0x250 [ 217.754534][ T9083] __split_vma+0x33d/0xd90 [ 217.754576][ T9083] ? __pfx___split_vma+0x10/0x10 [ 217.754620][ T9083] ? __pfx_mas_prev+0x10/0x10 [ 217.754652][ T9083] ? stack_trace_save+0x8e/0xc0 [ 217.754688][ T9083] vms_gather_munmap_vmas+0x39f/0x1500 [ 217.754733][ T9083] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 217.754770][ T9083] ? mas_walk+0x6ef/0x9b0 [ 217.754804][ T9083] __mmap_region+0x492/0x29e0 [ 217.754841][ T9083] ? __pfx___mmap_region+0x10/0x10 [ 217.754879][ T9083] ? ima_store_measurement+0x522/0x5b0 [ 217.754917][ T9083] ? kasan_quarantine_put+0x104/0x240 [ 217.754963][ T9083] ? find_held_lock+0x2b/0x80 [ 217.754986][ T9083] ? process_measurement+0x109c/0x2350 [ 217.755018][ T9083] ? process_measurement+0x109c/0x2350 [ 217.755049][ T9083] ? ima_store_measurement+0x26a/0x5b0 [ 217.755090][ T9083] ? __mutex_unlock_slowpath+0x15c/0x790 [ 217.755129][ T9083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.755176][ T9083] ? process_measurement+0x1f4/0x2350 [ 217.755251][ T9083] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 217.755290][ T9083] mmap_region+0x180/0x3e0 [ 217.755332][ T9083] do_mmap+0xc63/0x12f0 [ 217.755365][ T9083] ? __pfx_do_mmap+0x10/0x10 [ 217.755392][ T9083] ? __pfx_down_write_killable+0x10/0x10 [ 217.755429][ T9083] vm_mmap_pgoff+0x29e/0x470 [ 217.755463][ T9083] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 217.755488][ T9083] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 217.755523][ T9083] ? hugetlbfs_get_inode+0x36e/0x750 [ 217.755575][ T9083] ksys_mmap_pgoff+0x273/0x650 [ 217.755602][ T9083] ? __x64_sys_futex+0x358/0x4d0 [ 217.755636][ T9083] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 217.755662][ T9083] ? xfd_validate_state+0x129/0x190 [ 217.755706][ T9083] __x64_sys_mmap+0x125/0x190 [ 217.755746][ T9083] do_syscall_64+0x106/0xf80 [ 217.755771][ T9083] ? clear_bhb_loop+0x40/0x90 [ 217.755803][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.755829][ T9083] RIP: 0033:0x7f3be619c629 [ 217.755851][ T9083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.755875][ T9083] RSP: 002b:00007f3be43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.755900][ T9083] RAX: ffffffffffffffda RBX: 00007f3be6415fa0 RCX: 00007f3be619c629 [ 217.755918][ T9083] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000200000000000 [ 217.755935][ T9083] RBP: 00007f3be6232b39 R08: 0000000000000401 R09: 0000300000000000 [ 217.755951][ T9083] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 217.755967][ T9083] R13: 00007f3be6416038 R14: 00007f3be6415fa0 R15: 00007ffff67d6dc8 [ 217.756004][ T9083] [ 220.660638][ T9123] FAULT_INJECTION: forcing a failure. [ 220.660638][ T9123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.711379][ T9123] CPU: 0 UID: 0 PID: 9123 Comm: syz.5.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.711419][ T9123] Tainted: [L]=SOFTLOCKUP [ 220.711426][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.711439][ T9123] Call Trace: [ 220.711447][ T9123] [ 220.711457][ T9123] dump_stack_lvl+0x100/0x190 [ 220.711498][ T9123] should_fail_ex.cold+0x5/0xa [ 220.711528][ T9123] _copy_from_user+0x2e/0xd0 [ 220.711575][ T9123] get_timespec64+0x8b/0x1b0 [ 220.711603][ T9123] ? __pfx_get_timespec64+0x10/0x10 [ 220.711630][ T9123] ? ktime_get+0x200/0x300 [ 220.711664][ T9123] __x64_sys_futex+0x21a/0x4d0 [ 220.711700][ T9123] ? __pfx___x64_sys_futex+0x10/0x10 [ 220.711746][ T9123] do_syscall_64+0x106/0xf80 [ 220.711772][ T9123] ? clear_bhb_loop+0x40/0x90 [ 220.711802][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.711830][ T9123] RIP: 0033:0x7f3be619c629 [ 220.711852][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.711876][ T9123] RSP: 002b:00007ffff67d6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 220.711901][ T9123] RAX: ffffffffffffffda RBX: 0000000000035da3 RCX: 00007f3be619c629 [ 220.711918][ T9123] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3be6415fac [ 220.711934][ T9123] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 220.711949][ T9123] R10: 00007ffff67d7030 R11: 0000000000000246 R12: 00007ffff67d7050 [ 220.711965][ T9123] R13: 00007f3be6415fac R14: 0000000000035dd5 R15: 00007ffff67d7030 [ 220.712000][ T9123] [ 221.348619][ T9131] Invalid ELF header magic: != ELF [ 221.764922][ T9136] : Can't lookup blockdev [ 221.840788][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.649'. [ 221.891125][ T9139] netlink: 354 bytes leftover after parsing attributes in process `syz.5.649'. [ 222.087545][ T9141] FAULT_INJECTION: forcing a failure. [ 222.087545][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 222.114829][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.2.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.114894][ T9141] Tainted: [L]=SOFTLOCKUP [ 222.114904][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.114921][ T9141] Call Trace: [ 222.114929][ T9141] [ 222.114939][ T9141] dump_stack_lvl+0x100/0x190 [ 222.114987][ T9141] should_fail_ex.cold+0x5/0xa [ 222.115021][ T9141] should_failslab+0xc2/0x120 [ 222.115049][ T9141] __kmalloc_cache_noprof+0x7a/0x6f0 [ 222.115082][ T9141] ? alloc_tty_struct+0x96/0x8c0 [ 222.115126][ T9141] alloc_tty_struct+0x96/0x8c0 [ 222.115162][ T9141] ? __pfx_alloc_tty_struct+0x10/0x10 [ 222.115209][ T9141] pty_common_install+0x1c7/0xb30 [ 222.115239][ T9141] ? __pfx_pty_unix98_install+0x10/0x10 [ 222.115267][ T9141] tty_init_dev.part.0+0x9e/0x470 [ 222.115306][ T9141] tty_init_dev+0x60/0x80 [ 222.115342][ T9141] ptmx_open+0x15e/0x3c0 [ 222.115384][ T9141] ? __pfx_ptmx_open+0x10/0x10 [ 222.115426][ T9141] chrdev_open+0x234/0x6a0 [ 222.115452][ T9141] ? __pfx_apparmor_file_open+0x10/0x10 [ 222.115492][ T9141] ? __pfx_chrdev_open+0x10/0x10 [ 222.115521][ T9141] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 222.115576][ T9141] do_dentry_open+0x6d8/0x1660 [ 222.115619][ T9141] ? __pfx_chrdev_open+0x10/0x10 [ 222.115660][ T9141] vfs_open+0x82/0x3f0 [ 222.115720][ T9141] path_openat+0x208c/0x31a0 [ 222.115762][ T9141] ? __pfx_path_openat+0x10/0x10 [ 222.115829][ T9141] do_file_open+0x20e/0x430 [ 222.115865][ T9141] ? __pfx_do_file_open+0x10/0x10 [ 222.115935][ T9141] ? alloc_fd+0x476/0x790 [ 222.115994][ T9141] ? do_getname+0x191/0x390 [ 222.116026][ T9141] do_sys_openat2+0x10d/0x1e0 [ 222.116059][ T9141] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.116094][ T9141] ? __fget_files+0x21f/0x3d0 [ 222.116144][ T9141] __x64_sys_openat+0x12d/0x210 [ 222.116180][ T9141] ? __pfx___x64_sys_openat+0x10/0x10 [ 222.116229][ T9141] do_syscall_64+0x106/0xf80 [ 222.116259][ T9141] ? clear_bhb_loop+0x40/0x90 [ 222.116294][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.116322][ T9141] RIP: 0033:0x7f93c539c629 [ 222.116346][ T9141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.116372][ T9141] RSP: 002b:00007f93c62ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.116397][ T9141] RAX: ffffffffffffffda RBX: 00007f93c5615fa0 RCX: 00007f93c539c629 [ 222.116412][ T9141] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 222.116427][ T9141] RBP: 00007f93c5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 222.116442][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.116457][ T9141] R13: 00007f93c5616038 R14: 00007f93c5615fa0 R15: 00007ffdad0a12d8 [ 222.116493][ T9141] [ 223.721339][ T9147] zswap: compressor not available [ 223.924119][ T9176] ======================================================= [ 223.924119][ T9176] WARNING: The mand mount option has been deprecated and [ 223.924119][ T9176] and is ignored by this kernel. Remove the mand [ 223.924119][ T9176] option from the mount to silence this warning. [ 223.924119][ T9176] ======================================================= [ 224.094900][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.161494][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.214937][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.284545][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.314212][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.353785][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.366336][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.427239][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.478443][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.489707][ T9176] netlink: 'syz.5.657': attribute type 11 has an invalid length. [ 224.842118][ T9188] block2mtd: illegal erase size [ 225.046528][ T5836] Bluetooth: hci3: Malformed LE Event: 0x1b [ 225.238969][ T9197] vivid-007: ================= START STATUS ================= [ 225.252845][ T9197] vivid-007: Generate PTS: true [ 225.282379][ T9197] vivid-007: Generate SCR: true [ 225.287847][ T9197] tpg source WxH: 320x240 (Y'CbCr) [ 225.293048][ T9197] tpg field: 1 [ 225.333580][ T9197] tpg crop: (0,0)/320x240 [ 225.364286][ T9197] tpg compose: (0,0)/320x240 [ 225.369054][ T9197] tpg colorspace: 8 [ 225.372882][ T9197] tpg transfer function: 0/0 [ 225.396779][ T9197] tpg Y'CbCr encoding: 0/0 [ 225.414310][ T9197] tpg quantization: 0/0 [ 225.455932][ T9197] tpg RGB range: 0/2 [ 225.459847][ T9197] vivid-007: ================== END STATUS ================== [ 225.774454][ T9187] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 227.492606][ T9221] netlink: 342 bytes leftover after parsing attributes in process `syz.2.668'. [ 228.535992][ T9229] FAULT_INJECTION: forcing a failure. [ 228.535992][ T9229] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.549419][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.5.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.549464][ T9229] Tainted: [L]=SOFTLOCKUP [ 228.549475][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.549492][ T9229] Call Trace: [ 228.549500][ T9229] [ 228.549511][ T9229] dump_stack_lvl+0x100/0x190 [ 228.549560][ T9229] should_fail_ex.cold+0x5/0xa [ 228.549595][ T9229] should_fail_futex+0x4c/0x60 [ 228.549628][ T9229] futex_lock_pi_atomic+0xe7/0xaf0 [ 228.549677][ T9229] futex_lock_pi+0x246/0x7b0 [ 228.549725][ T9229] ? __pfx_futex_lock_pi+0x10/0x10 [ 228.549768][ T9229] ? __pfx___futex_wait+0x10/0x10 [ 228.549846][ T9229] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.549908][ T9229] ? ksys_write+0x190/0x250 [ 228.549951][ T9229] ? ksys_write+0x190/0x250 [ 228.549998][ T9229] do_futex+0x18a/0x350 [ 228.550034][ T9229] ? __pfx_do_futex+0x10/0x10 [ 228.550079][ T9229] __x64_sys_futex+0x34f/0x4d0 [ 228.550121][ T9229] ? __pfx___x64_sys_futex+0x10/0x10 [ 228.550172][ T9229] do_syscall_64+0x106/0xf80 [ 228.550202][ T9229] ? clear_bhb_loop+0x40/0x90 [ 228.550238][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.550267][ T9229] RIP: 0033:0x7f3be619c629 [ 228.550292][ T9229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.550319][ T9229] RSP: 002b:00007f3be43f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.550346][ T9229] RAX: ffffffffffffffda RBX: 00007f3be6415fa0 RCX: 00007f3be619c629 [ 228.550365][ T9229] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 228.550382][ T9229] RBP: 00007f3be6232b39 R08: 0000000000000000 R09: 000000008000fff5 [ 228.550400][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.550417][ T9229] R13: 00007f3be6416038 R14: 00007f3be6415fa0 R15: 00007ffff67d6dc8 [ 228.550456][ T9229] [ 228.959040][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.977670][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.999609][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.041128][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.057267][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.584636][ T9230] chnl_net:caif_netlink_parms(): no params data found [ 230.182429][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.227736][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.257472][ T9230] bridge_slave_0: entered allmulticast mode [ 230.288814][ T9230] bridge_slave_0: entered promiscuous mode [ 230.298165][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.305585][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.313072][ T9230] bridge_slave_1: entered allmulticast mode [ 230.323123][ T9230] bridge_slave_1: entered promiscuous mode [ 230.589526][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.698398][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.754377][ T9230] team0: Port device team_slave_0 added [ 230.768380][ T9230] team0: Port device team_slave_1 added [ 230.955133][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.005543][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.083676][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'. [ 231.117042][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.159506][ T5831] Bluetooth: hci4: command tx timeout [ 231.188761][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.227432][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.296989][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.529712][ T9230] hsr_slave_0: entered promiscuous mode [ 231.551162][ T9230] hsr_slave_1: entered promiscuous mode [ 231.621348][ T9230] debugfs: 'hsr0' already exists in 'hsr' [ 231.657931][ T9230] Cannot create hsr debugfs directory [ 231.683275][ T9250] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 232.284518][ T9272] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 232.753514][ T9230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 232.762377][ T9282] QAT: Invalid ioctl 6 [ 232.843019][ T9230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 232.938685][ T9230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 233.028691][ T9230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 233.250781][ T5831] Bluetooth: hci4: command tx timeout [ 233.467287][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.605174][ T9230] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.655178][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.662396][ T6489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.729670][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.736858][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.952512][ T9230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.224727][ T9306] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 234.419512][ T9310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.688'. [ 235.114730][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.247938][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 235.318869][ T5831] Bluetooth: hci4: command tx timeout [ 235.849330][ T9338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 236.061355][ T29] audit: type=1804 audit(4295034002.716:84): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.694" name="file0" dev="tmpfs" ino=1188 res=1 errno=0 [ 236.154737][ T9346] mkiss: ax0: crc mode is auto. [ 236.593257][ T9357] vhci_hcd vhci_hcd.2: invalid port number 135 [ 236.637461][ T9357] vhci_hcd vhci_hcd.2: invalid port number 135 [ 236.703254][ T9230] veth0_vlan: entered promiscuous mode [ 236.931769][ T9230] veth1_vlan: entered promiscuous mode [ 237.399702][ T5831] Bluetooth: hci4: command tx timeout [ 237.418857][ T9230] veth0_macvtap: entered promiscuous mode [ 237.519540][ T9230] veth1_macvtap: entered promiscuous mode [ 237.565554][ T9375] futex_wake_op: syz.2.704 tries to shift op by -2048; fix this program [ 237.656058][ T9375] futex_wake_op: syz.2.704 tries to shift op by -2048; fix this program [ 237.719593][ T9375] 0x000000000001-0x000000020000 : "" [ 237.865335][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.876159][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.056751][ T9375] ftl_cs: FTL header corrupt! [ 238.147973][ T6216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.185928][ T6216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.207099][ T6216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.354621][ T6216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.887067][ T9397] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 239.397972][ T6230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.411042][ T9404] openvswitch: netlink: Key type 29 is not supported [ 239.513301][ T6230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.666663][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.717342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.525890][ T9422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.164580][ T9428] FAULT_INJECTION: forcing a failure. [ 243.164580][ T9428] name failslab, interval 1, probability 0, space 0, times 0 [ 243.202920][ T9428] CPU: 0 UID: 0 PID: 9428 Comm: syz.5.719 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.202966][ T9428] Tainted: [L]=SOFTLOCKUP [ 243.202975][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.202991][ T9428] Call Trace: [ 243.203000][ T9428] [ 243.203011][ T9428] dump_stack_lvl+0x100/0x190 [ 243.203056][ T9428] should_fail_ex.cold+0x5/0xa [ 243.203088][ T9428] ? read_page_owner+0xd79/0x1c80 [ 243.203128][ T9428] should_failslab+0xc2/0x120 [ 243.203154][ T9428] __kmalloc_noprof+0xe0/0x850 [ 243.203193][ T9428] read_page_owner+0xd79/0x1c80 [ 243.203235][ T9428] ? __pfx_read_page_owner+0x10/0x10 [ 243.203280][ T9428] ? __pfx___might_resched+0x10/0x10 [ 243.203317][ T9428] ? get_pid_task+0xfc/0x250 [ 243.203352][ T9428] ? __debugfs_file_get+0x1fc/0x860 [ 243.203382][ T9428] ? __pfx___debugfs_file_get+0x10/0x10 [ 243.203420][ T9428] full_proxy_read+0x135/0x1a0 [ 243.203450][ T9428] ? __pfx_full_proxy_read+0x10/0x10 [ 243.203482][ T9428] vfs_read+0x1e4/0xb30 [ 243.203527][ T9428] ? __pfx_vfs_read+0x10/0x10 [ 243.203570][ T9428] ? find_held_lock+0x2b/0x80 [ 243.203594][ T9428] ? __fget_files+0x215/0x3d0 [ 243.203633][ T9428] ? __fget_files+0x215/0x3d0 [ 243.203679][ T9428] ? __fget_files+0x21f/0x3d0 [ 243.203727][ T9428] __x64_sys_pread64+0x1eb/0x250 [ 243.203769][ T9428] ? __pfx___x64_sys_pread64+0x10/0x10 [ 243.203818][ T9428] do_syscall_64+0x106/0xf80 [ 243.203844][ T9428] ? clear_bhb_loop+0x40/0x90 [ 243.203874][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.203898][ T9428] RIP: 0033:0x7f3be619c629 [ 243.203919][ T9428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.203942][ T9428] RSP: 002b:00007f3be43d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 243.203966][ T9428] RAX: ffffffffffffffda RBX: 00007f3be6416090 RCX: 00007f3be619c629 [ 243.203983][ T9428] RDX: 0000020000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 243.203998][ T9428] RBP: 00007f3be43d5090 R08: 0000000000000000 R09: 0000000000000000 [ 243.204013][ T9428] R10: 0000000000028001 R11: 0000000000000246 R12: 0000000000000001 [ 243.204027][ T9428] R13: 00007f3be6416128 R14: 00007f3be6416090 R15: 00007ffff67d6dc8 [ 243.204060][ T9428] [ 244.823929][ T9438] delete_channel: no stack [ 245.376332][ T9459] Setting dangerous option i915.mitigations - tainting kernel [ 245.788037][ T9461] Invalid ELF header magic: != ELF [ 246.772732][ T9493] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 248.527627][ T9521] netlink: 252 bytes leftover after parsing attributes in process `syz.3.744'. [ 248.602985][ T9525] netlink: 252 bytes leftover after parsing attributes in process `syz.3.744'. [ 248.673721][ T9521] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.744'. [ 249.509064][ T9533] FAULT_INJECTION: forcing a failure. [ 249.509064][ T9533] name fail_futex, interval 1, probability 0, space 0, times 0 [ 249.566800][ T9533] CPU: 1 UID: 0 PID: 9533 Comm: syz.5.749 Tainted: G U L syzkaller #0 PREEMPT(full) [ 249.566846][ T9533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 249.566855][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.566870][ T9533] Call Trace: [ 249.566878][ T9533] [ 249.566888][ T9533] dump_stack_lvl+0x100/0x190 [ 249.566933][ T9533] should_fail_ex.cold+0x5/0xa [ 249.566979][ T9533] get_futex_key+0x1d2/0x1620 [ 249.567015][ T9533] ? __pfx_get_futex_key+0x10/0x10 [ 249.567044][ T9533] ? futex_hash+0x2c5/0x380 [ 249.567085][ T9533] futex_wake+0xea/0x530 [ 249.567124][ T9533] ? __pfx_futex_wait+0x10/0x10 [ 249.567160][ T9533] ? __pfx_futex_wake+0x10/0x10 [ 249.567201][ T9533] ? ksys_write+0x190/0x250 [ 249.567237][ T9533] ? ksys_write+0x190/0x250 [ 249.567279][ T9533] do_futex+0x32b/0x350 [ 249.567312][ T9533] ? __pfx_do_futex+0x10/0x10 [ 249.567356][ T9533] __x64_sys_futex+0x34f/0x4d0 [ 249.567392][ T9533] ? __pfx___x64_sys_futex+0x10/0x10 [ 249.567425][ T9533] ? __task_pid_nr_ns+0x1ca/0x510 [ 249.567456][ T9533] ? __task_pid_nr_ns+0x1ca/0x510 [ 249.567496][ T9533] do_syscall_64+0x106/0xf80 [ 249.567525][ T9533] ? clear_bhb_loop+0x40/0x90 [ 249.567568][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.567597][ T9533] RIP: 0033:0x7f3be619c629 [ 249.567619][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.567643][ T9533] RSP: 002b:00007f3be43f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.567669][ T9533] RAX: ffffffffffffffda RBX: 00007f3be6415fa8 RCX: 00007f3be619c629 [ 249.567687][ T9533] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3be6415fac [ 249.567704][ T9533] RBP: 00007f3be6415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 249.567720][ T9533] R10: 000000000000009f R11: 0000000000000246 R12: 0000000000000000 [ 249.567735][ T9533] R13: 00007f3be6416038 R14: 00007ffff67d6ce0 R15: 00007ffff67d6dc8 [ 249.567771][ T9533] [ 251.202428][ T9563] Invalid ELF header magic: != ELF [ 252.357954][ T9572] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 254.834495][ T9612] netlink: 11 bytes leftover after parsing attributes in process `syz.3.767'. [ 255.893541][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.900040][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.512534][ T9627] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 258.077513][ T9634] Invalid ELF header magic: != ELF [ 259.487658][ T9650] kafs: addr_prefs: Invalid Command [ 259.812238][ T9652] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 262.762660][ T9685] Invalid ELF header magic: != ELF [ 265.723109][ T9715] ksmbd: Unknown IPC event: 14, ignore. [ 267.374877][ T9723] Invalid ELF header magic: != ELF [ 271.155937][ T5831] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 271.356842][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 272.187701][ T9777] Invalid ELF header magic: != ELF [ 274.299259][ T9820] FAULT_INJECTION: forcing a failure. [ 274.299259][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 274.350830][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.5.815 Tainted: G U L syzkaller #0 PREEMPT(full) [ 274.350878][ T9820] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 274.350888][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.350904][ T9820] Call Trace: [ 274.350913][ T9820] [ 274.350923][ T9820] dump_stack_lvl+0x100/0x190 [ 274.350968][ T9820] should_fail_ex.cold+0x5/0xa [ 274.350999][ T9820] ? tomoyo_encode2+0xfb/0x3c0 [ 274.351025][ T9820] should_failslab+0xc2/0x120 [ 274.351052][ T9820] __kmalloc_noprof+0xe0/0x850 [ 274.351088][ T9820] ? d_absolute_path+0x136/0x1b0 [ 274.351128][ T9820] tomoyo_encode2+0xfb/0x3c0 [ 274.351159][ T9820] tomoyo_encode+0x29/0x50 [ 274.351185][ T9820] tomoyo_realpath_from_path+0x18c/0x690 [ 274.351223][ T9820] tomoyo_path_number_perm+0x23c/0x580 [ 274.351260][ T9820] ? tomoyo_path_number_perm+0x22e/0x580 [ 274.351302][ T9820] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.351341][ T9820] ? futex_wait+0x125/0x380 [ 274.351412][ T9820] ? find_held_lock+0x2b/0x80 [ 274.351436][ T9820] ? __fget_files+0x215/0x3d0 [ 274.351473][ T9820] ? hook_file_ioctl_common+0x146/0x410 [ 274.351521][ T9820] ? __fget_files+0x21f/0x3d0 [ 274.351566][ T9820] security_file_ioctl+0xd3/0x230 [ 274.351608][ T9820] __x64_sys_ioctl+0xb7/0x210 [ 274.351646][ T9820] do_syscall_64+0x106/0xf80 [ 274.351675][ T9820] ? clear_bhb_loop+0x40/0x90 [ 274.351709][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.351747][ T9820] RIP: 0033:0x7f3be619c629 [ 274.351770][ T9820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.351796][ T9820] RSP: 002b:00007f3be43d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.351821][ T9820] RAX: ffffffffffffffda RBX: 00007f3be6416090 RCX: 00007f3be619c629 [ 274.351838][ T9820] RDX: 00002000000000c0 RSI: 00000000c0305710 RDI: 0000000000000005 [ 274.351856][ T9820] RBP: 00007f3be6232b39 R08: 0000000000000000 R09: 0000000000000000 [ 274.351871][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.351887][ T9820] R13: 00007f3be6416128 R14: 00007f3be6416090 R15: 00007ffff67d6dc8 [ 274.351923][ T9820] [ 274.351948][ T9820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.942588][ T9926] Invalid ELF header magic: != ELF [ 282.024230][ T9928] Invalid ELF header magic: != ELF [ 284.993887][ T9960] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 285.937661][ T9976] FAULT_INJECTION: forcing a failure. [ 285.937661][ T9976] name failslab, interval 1, probability 0, space 0, times 0 [ 286.023654][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz.6.850 Tainted: G U L syzkaller #0 PREEMPT(full) [ 286.023706][ T9976] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 286.023717][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.023747][ T9976] Call Trace: [ 286.023757][ T9976] [ 286.023769][ T9976] dump_stack_lvl+0x100/0x190 [ 286.023818][ T9976] should_fail_ex.cold+0x5/0xa [ 286.023849][ T9976] should_failslab+0xc2/0x120 [ 286.023875][ T9976] __kvmalloc_node_noprof+0xfa/0xa00 [ 286.023918][ T9976] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 286.023970][ T9976] v4l2_ctrl_new+0x4a6/0x23a0 [ 286.024021][ T9976] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 286.024052][ T9976] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 286.024104][ T9976] v4l2_ctrl_new_std+0x1bb/0x290 [ 286.024151][ T9976] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 286.024182][ T9976] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 286.024217][ T9976] ? trace_kmalloc+0x101/0x130 [ 286.024248][ T9976] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 286.024281][ T9976] ? lockdep_set_lock_cmp_fn+0xe0/0xe0 [ 286.024319][ T9976] ? media_request_object_init+0x105/0x180 [ 286.024356][ T9976] vim2m_open+0x164/0x830 [ 286.024392][ T9976] v4l2_open+0x1d2/0x490 [ 286.024428][ T9976] ? __pfx_v4l2_open+0x10/0x10 [ 286.024463][ T9976] chrdev_open+0x234/0x6a0 [ 286.024489][ T9976] ? __pfx_apparmor_file_open+0x10/0x10 [ 286.024528][ T9976] ? __pfx_chrdev_open+0x10/0x10 [ 286.024556][ T9976] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 286.024607][ T9976] do_dentry_open+0x6d8/0x1660 [ 286.024648][ T9976] ? __pfx_chrdev_open+0x10/0x10 [ 286.024683][ T9976] vfs_open+0x82/0x3f0 [ 286.024719][ T9976] path_openat+0x208c/0x31a0 [ 286.024759][ T9976] ? __pfx_path_openat+0x10/0x10 [ 286.024802][ T9976] do_file_open+0x20e/0x430 [ 286.024832][ T9976] ? __pfx_do_file_open+0x10/0x10 [ 286.024888][ T9976] ? alloc_fd+0x476/0x790 [ 286.024936][ T9976] ? do_getname+0x191/0x390 [ 286.024980][ T9976] do_sys_openat2+0x10d/0x1e0 [ 286.025014][ T9976] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.025052][ T9976] ? __fget_files+0x21f/0x3d0 [ 286.025102][ T9976] __x64_sys_openat+0x12d/0x210 [ 286.025138][ T9976] ? __pfx___x64_sys_openat+0x10/0x10 [ 286.025189][ T9976] do_syscall_64+0x106/0xf80 [ 286.025221][ T9976] ? clear_bhb_loop+0x40/0x90 [ 286.025257][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.025287][ T9976] RIP: 0033:0x7f5f3019c629 [ 286.025311][ T9976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.025338][ T9976] RSP: 002b:00007f5f310dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.025366][ T9976] RAX: ffffffffffffffda RBX: 00007f5f30415fa0 RCX: 00007f5f3019c629 [ 286.025385][ T9976] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 286.025405][ T9976] RBP: 00007f5f30232b39 R08: 0000000000000000 R09: 0000000000000000 [ 286.025423][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.025440][ T9976] R13: 00007f5f30416038 R14: 00007f5f30415fa0 R15: 00007ffc2ea35b18 [ 286.025479][ T9976] [ 286.548479][ T9980] Invalid ELF header magic: != ELF [ 288.110680][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.152774][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.452685][T10017] GUP no longer grows the stack in syz.6.860 (10017): 5000-401000 (4000) [ 289.489361][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.6.860 Tainted: G U L syzkaller #0 PREEMPT(full) [ 289.489416][T10017] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 289.489426][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.489442][T10017] Call Trace: [ 289.489451][T10017] [ 289.489461][T10017] dump_stack_lvl+0x100/0x190 [ 289.489506][T10017] gup_vma_lookup.cold+0x83/0x96 [ 289.489545][T10017] __get_user_pages+0x241/0x34d0 [ 289.489585][T10017] ? down_read_killable+0x30e/0x4c0 [ 289.489618][T10017] ? __lock_acquire+0x4a5/0x2630 [ 289.489651][T10017] ? __pfx___get_user_pages+0x10/0x10 [ 289.489689][T10017] __gup_longterm_locked+0x87d/0x16f0 [ 289.489730][T10017] ? __pfx___gup_longterm_locked+0x10/0x10 [ 289.489761][T10017] ? try_get_folio+0x262/0x750 [ 289.489799][T10017] ? find_held_lock+0x2b/0x80 [ 289.489823][T10017] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 289.489858][T10017] gup_fast_fallback+0x18c6/0x2460 [ 289.489912][T10017] ? __pfx_gup_fast_fallback+0x10/0x10 [ 289.489941][T10017] ? __lock_acquire+0x4a5/0x2630 [ 289.489970][T10017] ? bio_associate_blkg_from_css+0xe33/0x13f0 [ 289.489999][T10017] ? bio_associate_blkg+0x10c/0x2a0 [ 289.490036][T10017] pin_user_pages_fast+0xa7/0xf0 [ 289.490064][T10017] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 289.490094][T10017] ? find_held_lock+0x2b/0x80 [ 289.490118][T10017] ? __debug_object_init+0x2de/0x3d0 [ 289.490153][T10017] ? __debug_object_init+0x2de/0x3d0 [ 289.490190][T10017] iov_iter_extract_pages+0xa0d/0x1ef0 [ 289.490242][T10017] ? __lock_acquire+0x4a5/0x2630 [ 289.490275][T10017] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 289.490322][T10017] ? __lock_acquire+0x4a5/0x2630 [ 289.490361][T10017] iov_iter_extract_bvecs+0x10e/0xf40 [ 289.490419][T10017] ? find_held_lock+0x2b/0x80 [ 289.490442][T10017] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 289.490473][T10017] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 289.490518][T10017] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 289.490556][T10017] bio_iov_iter_get_pages+0x26a/0x970 [ 289.490607][T10017] __blkdev_direct_IO_simple+0x3a7/0x890 [ 289.490646][T10017] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 289.490709][T10017] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 289.490742][T10017] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 289.490785][T10017] blkdev_direct_IO+0xc76/0x1fb0 [ 289.490832][T10017] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 289.490861][T10017] ? rcu_is_watching+0x12/0xc0 [ 289.490898][T10017] ? __mark_inode_dirty+0x55c/0x1790 [ 289.490935][T10017] ? filemap_check_errors+0xa9/0x150 [ 289.490972][T10017] blkdev_write_iter+0x703/0xd70 [ 289.491011][T10017] vfs_write+0x6ac/0x1070 [ 289.491051][T10017] ? __pfx_blkdev_write_iter+0x10/0x10 [ 289.491083][T10017] ? __pfx_vfs_write+0x10/0x10 [ 289.491119][T10017] ? find_held_lock+0x2b/0x80 [ 289.491166][T10017] ksys_write+0x12a/0x250 [ 289.491205][T10017] ? __pfx_ksys_write+0x10/0x10 [ 289.491254][T10017] do_syscall_64+0x106/0xf80 [ 289.491283][T10017] ? clear_bhb_loop+0x40/0x90 [ 289.491317][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.491345][T10017] RIP: 0033:0x7f5f3019c629 [ 289.491368][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.491394][T10017] RSP: 002b:00007f5f310dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.491428][T10017] RAX: ffffffffffffffda RBX: 00007f5f30415fa0 RCX: 00007f5f3019c629 [ 289.491446][T10017] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000003 [ 289.491462][T10017] RBP: 00007f5f30232b39 R08: 0000000000000000 R09: 0000000000000000 [ 289.491479][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.491495][T10017] R13: 00007f5f30416038 R14: 00007f5f30415fa0 R15: 00007ffc2ea35b18 [ 289.491531][T10017] [ 290.700322][T10033] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 290.738506][T10033] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 291.345769][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'. [ 291.662001][T10044] zswap: compressor not available [ 293.035784][T10053] kexec: Could not allocate control_code_buffer [ 294.662453][T10081] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 295.249659][T10091] Invalid ELF header magic: != ELF [ 297.474394][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.489744][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.499024][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.520035][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.540119][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.972727][T10118] chnl_net:caif_netlink_parms(): no params data found [ 299.538345][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.566389][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.598091][T10118] bridge_slave_0: entered allmulticast mode [ 299.615988][T10118] bridge_slave_0: entered promiscuous mode [ 299.662499][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.675816][ T5831] Bluetooth: hci5: command tx timeout [ 299.692742][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.700010][T10118] bridge_slave_1: entered allmulticast mode [ 299.754157][T10118] bridge_slave_1: entered promiscuous mode [ 299.935916][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.958654][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.271659][T10118] team0: Port device team_slave_0 added [ 300.314978][T10118] team0: Port device team_slave_1 added [ 300.455280][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.494905][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.627862][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.677145][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.684341][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.754935][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.008007][T10118] hsr_slave_0: entered promiscuous mode [ 301.039263][T10118] hsr_slave_1: entered promiscuous mode [ 301.058740][T10118] debugfs: 'hsr0' already exists in 'hsr' [ 301.077538][T10118] Cannot create hsr debugfs directory [ 301.756268][ T5831] Bluetooth: hci5: command tx timeout [ 301.794647][T10146] sctp: [Deprecated]: syz.3.894 (pid 10146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.794647][T10146] Use struct sctp_sack_info instead [ 302.310589][T10118] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.344443][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.895'. [ 302.377349][T10118] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.446872][T10118] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.464714][T10141] kexec: Could not allocate control_code_buffer [ 302.546689][T10118] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.713935][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 303.569307][T10118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.660624][T10118] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.762906][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.770082][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.836428][ T5831] Bluetooth: hci5: command tx timeout [ 303.905441][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.912651][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.015207][T10168] netlink: 342 bytes leftover after parsing attributes in process `syz.6.899'. [ 304.900596][T10118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.914616][ T5831] Bluetooth: hci5: command tx timeout [ 306.025296][T10118] veth0_vlan: entered promiscuous mode [ 306.079809][T10118] veth1_vlan: entered promiscuous mode [ 306.240077][T10118] veth0_macvtap: entered promiscuous mode [ 306.287306][T10118] veth1_macvtap: entered promiscuous mode [ 306.424231][T10118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.472851][T10118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.574327][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.586970][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.606121][ T88] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.654890][ T88] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.914760][T10209] zswap: compressor not available [ 307.103007][ T9830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.144100][ T9830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.316336][ T9830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.324205][ T9830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.531072][T10249] usb usb15: usbfs: process 10249 (syz.7.915) did not claim interface 0 before use [ 308.750218][T10259] netlink: 504 bytes leftover after parsing attributes in process `syz.6.916'. [ 310.564964][T10308] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.580278][T10308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.667485][T10308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.680664][T10308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.691792][T10308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.134948][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 311.156887][T10308] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 311.164437][T10308] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 311.394139][T10333] FAULT_INJECTION: forcing a failure. [ 311.394139][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 311.462997][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.6.935 Tainted: G U L syzkaller #0 PREEMPT(full) [ 311.463042][T10333] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 311.463053][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.463069][T10333] Call Trace: [ 311.463077][T10333] [ 311.463087][T10333] dump_stack_lvl+0x100/0x190 [ 311.463132][T10333] should_fail_ex.cold+0x5/0xa [ 311.463163][T10333] should_failslab+0xc2/0x120 [ 311.463188][T10333] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 311.463226][T10333] ? security_inode_alloc+0x3b/0x2c0 [ 311.463264][T10333] ? lockdep_init_map_type+0x5c/0x250 [ 311.463304][T10333] security_inode_alloc+0x3b/0x2c0 [ 311.463340][T10333] inode_init_always_gfp+0xced/0x1040 [ 311.463386][T10333] alloc_inode+0x8e/0x250 [ 311.463417][T10333] new_inode+0x22/0x1c0 [ 311.463451][T10333] shmem_get_inode+0x212/0x1040 [ 311.463485][T10333] ? __pfx_shmem_get_inode+0x10/0x10 [ 311.463517][T10333] ? rcu_is_watching+0x12/0xc0 [ 311.463553][T10333] ? percpu_counter_add_batch+0xb9/0x230 [ 311.463611][T10333] __shmem_file_setup+0x3ac/0x490 [ 311.463648][T10333] ? __pfx___shmem_file_setup+0x10/0x10 [ 311.463689][T10333] ? vm_area_alloc+0x1f/0x160 [ 311.463728][T10333] shmem_zero_setup+0x96/0x1b0 [ 311.463770][T10333] __mmap_region+0x2198/0x29e0 [ 311.463810][T10333] ? __pfx___mmap_region+0x10/0x10 [ 311.463843][T10333] ? process_measurement+0x1f4/0x2350 [ 311.463915][T10333] ? sched_clock+0x38/0x60 [ 311.463965][T10333] ? lockdep_hardirqs_on+0x78/0x100 [ 311.463995][T10333] ? finish_task_switch.isra.0+0x205/0xb80 [ 311.464026][T10333] ? rcu_is_watching+0x12/0xc0 [ 311.464110][T10333] ? rcu_is_watching+0x12/0xc0 [ 311.464145][T10333] ? cap_capable+0x107/0x460 [ 311.464177][T10333] mmap_region+0x180/0x3e0 [ 311.464208][T10333] do_mmap+0xc63/0x12f0 [ 311.464242][T10333] ? __pfx_do_mmap+0x10/0x10 [ 311.464270][T10333] ? __pfx_down_write_killable+0x10/0x10 [ 311.464312][T10333] vm_mmap_pgoff+0x29e/0x470 [ 311.464345][T10333] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.464370][T10333] ? do_futex+0x192/0x350 [ 311.464398][T10333] ? __pfx_do_futex+0x10/0x10 [ 311.464431][T10333] ksys_mmap_pgoff+0xe1/0x650 [ 311.464459][T10333] ? __x64_sys_futex+0x34f/0x4d0 [ 311.464491][T10333] ? __x64_sys_futex+0x358/0x4d0 [ 311.464522][T10333] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 311.464549][T10333] ? xfd_validate_state+0x129/0x190 [ 311.464611][T10333] __x64_sys_mmap+0x125/0x190 [ 311.464654][T10333] do_syscall_64+0x106/0xf80 [ 311.464680][T10333] ? clear_bhb_loop+0x40/0x90 [ 311.464712][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.464739][T10333] RIP: 0033:0x7f5f3019c629 [ 311.464759][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.464784][T10333] RSP: 002b:00007f5f31079028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 311.464809][T10333] RAX: ffffffffffffffda RBX: 00007f5f30416270 RCX: 00007f5f3019c629 [ 311.464827][T10333] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 311.464843][T10333] RBP: 00007f5f30232b39 R08: fffffffffffffffa R09: 0000000000008000 [ 311.464859][T10333] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 311.464876][T10333] R13: 00007f5f30416308 R14: 00007f5f30416270 R15: 00007ffc2ea35b18 [ 311.464912][T10333] [ 312.272000][T10305] chnl_net:caif_netlink_parms(): no params data found [ 312.719122][T10274] Bluetooth: hci6: command tx timeout [ 312.786215][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.797762][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.805233][T10305] bridge_slave_0: entered allmulticast mode [ 312.819398][T10305] bridge_slave_0: entered promiscuous mode [ 312.889685][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.913934][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.946760][T10305] bridge_slave_1: entered allmulticast mode [ 313.164663][T10305] bridge_slave_1: entered promiscuous mode [ 313.326997][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.353758][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.420700][T10353] futex_wake_op: syz.7.940 tries to shift op by -2048; fix this program [ 313.439434][T10353] futex_wake_op: syz.7.940 tries to shift op by -2048; fix this program [ 313.465134][T10353] 0x000000000001-0x000000020000 : "" [ 313.498226][T10353] ftl_cs: FTL header corrupt! [ 313.504041][T10305] team0: Port device team_slave_0 added [ 313.735404][T10305] team0: Port device team_slave_1 added [ 313.874896][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.891244][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.949743][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.007329][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.042632][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.109726][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.474849][T10305] hsr_slave_0: entered promiscuous mode [ 314.507682][T10305] hsr_slave_1: entered promiscuous mode [ 314.519240][T10305] debugfs: 'hsr0' already exists in 'hsr' [ 314.528387][T10305] Cannot create hsr debugfs directory [ 314.798499][T10274] Bluetooth: hci6: command tx timeout [ 315.307918][T10305] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 315.323008][T10305] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 315.353300][T10305] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 315.414387][T10305] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 315.603454][T10274] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 315.617613][T10274] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 315.700202][T10384] FAULT_INJECTION: forcing a failure. [ 315.700202][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.748156][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.7.947 Tainted: G U L syzkaller #0 PREEMPT(full) [ 315.748198][T10384] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 315.748208][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.748232][T10384] Call Trace: [ 315.748241][T10384] [ 315.748251][T10384] dump_stack_lvl+0x100/0x190 [ 315.748295][T10384] should_fail_ex.cold+0x5/0xa [ 315.748324][T10384] _copy_from_user+0x2e/0xd0 [ 315.748363][T10384] get_timespec64+0x8b/0x1b0 [ 315.748390][T10384] ? __pfx_get_timespec64+0x10/0x10 [ 315.748420][T10384] ? common_nsleep+0xa1/0xd0 [ 315.748452][T10384] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 315.748495][T10384] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 315.748543][T10384] do_syscall_64+0x106/0xf80 [ 315.748571][T10384] ? clear_bhb_loop+0x40/0x90 [ 315.748601][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.748627][T10384] RIP: 0033:0x7fc99a35cece [ 315.748651][T10384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.748674][T10384] RSP: 002b:00007ffde4a13be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 315.748698][T10384] RAX: ffffffffffffffda RBX: 000055557cb47500 RCX: 00007fc99a35cece [ 315.748716][T10384] RDX: 00007ffde4a13c40 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.748731][T10384] RBP: 00007fc99a617da0 R08: 0000000000000000 R09: 0000000000000000 [ 315.748746][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004d2eb [ 315.748761][T10384] R13: 00007fc99a61609c R14: 000000000004d0a6 R15: 00007ffde4a13d70 [ 315.748794][T10384] [ 316.015732][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.035652][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.097963][T10311] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.105124][T10311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.117356][T10311] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.124589][T10311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.261567][T10305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.272259][T10305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.358130][T10408] netlink: 342 bytes leftover after parsing attributes in process `syz.3.952'. [ 316.770000][T10417] Invalid ELF header magic: != ELF [ 316.796910][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.880119][T10274] Bluetooth: hci6: command tx timeout [ 317.378121][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.384749][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.768307][T10305] veth0_vlan: entered promiscuous mode [ 317.832940][T10305] veth1_vlan: entered promiscuous mode [ 317.957539][T10305] veth0_macvtap: entered promiscuous mode [ 318.026668][T10305] veth1_macvtap: entered promiscuous mode [ 318.089036][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.136760][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.188014][T10348] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.214307][T10348] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.244446][T10348] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.263034][T10348] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.553329][T10451] zswap: compressor X;وM+sc>u,L#u not available [ 318.678356][T10311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.689898][T10311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.844495][T10236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.864683][T10236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.987020][T10274] Bluetooth: hci6: command tx timeout [ 319.721301][T10470] Invalid ELF header magic: != ELF [ 320.612059][T10482] FAULT_INJECTION: forcing a failure. [ 320.612059][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 320.626366][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.8.967 Tainted: G U L syzkaller #0 PREEMPT(full) [ 320.626411][T10482] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 320.626418][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.626427][T10482] Call Trace: [ 320.626433][T10482] [ 320.626439][T10482] dump_stack_lvl+0x100/0x190 [ 320.626468][T10482] should_fail_ex.cold+0x5/0xa [ 320.626487][T10482] should_failslab+0xc2/0x120 [ 320.626502][T10482] __kvmalloc_node_noprof+0xfa/0xa00 [ 320.626524][T10482] ? io_alloc_cache_init+0x38/0x170 [ 320.626544][T10482] ? lockdep_init_map_type+0x5c/0x250 [ 320.626567][T10482] io_alloc_cache_init+0x38/0x170 [ 320.626590][T10482] io_uring_setup.cold+0x3cd/0x1d09 [ 320.626612][T10482] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 320.626628][T10482] ? __pfx_io_uring_setup+0x10/0x10 [ 320.626643][T10482] ? rcu_is_watching+0x12/0xc0 [ 320.626664][T10482] ? trace_sched_exit_tp+0x13a/0x180 [ 320.626681][T10482] ? __schedule+0x1000/0x60e0 [ 320.626696][T10482] ? __pfx_do_futex+0x10/0x10 [ 320.626724][T10482] ? __pfx___schedule+0x10/0x10 [ 320.626737][T10482] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 320.626757][T10482] ? trace_irq_enable.constprop.0+0x2f/0x180 [ 320.626775][T10482] __x64_sys_io_uring_setup+0xc2/0x170 [ 320.626792][T10482] do_syscall_64+0x106/0xf80 [ 320.626807][T10482] ? clear_bhb_loop+0x40/0x90 [ 320.626833][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.626849][T10482] RIP: 0033:0x7fb79eb9c629 [ 320.626863][T10482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.626877][T10482] RSP: 002b:00007fb79fa78028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 320.626892][T10482] RAX: ffffffffffffffda RBX: 00007fb79ee15fa0 RCX: 00007fb79eb9c629 [ 320.626902][T10482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001d48 [ 320.626912][T10482] RBP: 00007fb79ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 320.626922][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.626931][T10482] R13: 00007fb79ee16038 R14: 00007fb79ee15fa0 R15: 00007ffd98520ea8 [ 320.626950][T10482] [ 320.997647][T10482] FAULT_INJECTION: forcing a failure. [ 320.997647][T10482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.051528][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.8.967 Tainted: G U L syzkaller #0 PREEMPT(full) [ 321.051579][T10482] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 321.051590][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.051607][T10482] Call Trace: [ 321.051617][T10482] [ 321.051628][T10482] dump_stack_lvl+0x100/0x190 [ 321.051677][T10482] should_fail_ex.cold+0x5/0xa [ 321.051704][T10482] ? prepare_alloc_pages+0x16d/0x5f0 [ 321.051737][T10482] should_fail_alloc_page+0xeb/0x140 [ 321.051767][T10482] prepare_alloc_pages+0x1f0/0x5f0 [ 321.051802][T10482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.051852][T10482] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 321.051895][T10482] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 321.051945][T10482] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 321.051982][T10482] ? vma_wants_writenotify+0x10b/0x390 [ 321.052022][T10482] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 321.052067][T10482] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 321.052116][T10482] ? vma_set_page_prot+0xb1/0x120 [ 321.052155][T10482] ? mas_ascend+0x53d/0xb30 [ 321.052184][T10482] ? __pfx___mmap_region+0x10/0x10 [ 321.052220][T10482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.052269][T10482] ? policy_nodemask+0xed/0x4f0 [ 321.052301][T10482] alloc_pages_mpol+0x1fb/0x550 [ 321.052332][T10482] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 321.052370][T10482] alloc_pages_noprof+0x131/0x390 [ 321.052400][T10482] __pmd_alloc+0x3b/0x9c0 [ 321.052435][T10482] __handle_mm_fault+0xa99/0x2b60 [ 321.052477][T10482] ? mt_find+0x45e/0x8e0 [ 321.052512][T10482] ? __pfx___handle_mm_fault+0x10/0x10 [ 321.052544][T10482] ? __pfx_mt_find+0x10/0x10 [ 321.052633][T10482] handle_mm_fault+0x36d/0xa20 [ 321.052678][T10482] __get_user_pages+0xf9c/0x34d0 [ 321.052723][T10482] ? __pfx___get_user_pages+0x10/0x10 [ 321.052762][T10482] populate_vma_page_range+0x267/0x3f0 [ 321.052802][T10482] ? __pfx_populate_vma_page_range+0x10/0x10 [ 321.052834][T10482] ? __pfx_find_vma_intersection+0x10/0x10 [ 321.052883][T10482] ? do_mmap+0x93f/0x12f0 [ 321.052911][T10482] __mm_populate+0x107/0x3a0 [ 321.052943][T10482] ? __pfx___mm_populate+0x10/0x10 [ 321.052978][T10482] ? up_write+0x290/0x4f0 [ 321.053022][T10482] vm_mmap_pgoff+0x37f/0x470 [ 321.053057][T10482] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 321.053089][T10482] ? do_futex+0x192/0x350 [ 321.053126][T10482] ? __pfx_do_futex+0x10/0x10 [ 321.053167][T10482] ksys_mmap_pgoff+0xe1/0x650 [ 321.053195][T10482] ? __x64_sys_futex+0x34f/0x4d0 [ 321.053230][T10482] ? __x64_sys_futex+0x358/0x4d0 [ 321.053265][T10482] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 321.053293][T10482] ? xfd_validate_state+0x129/0x190 [ 321.053341][T10482] __x64_sys_mmap+0x125/0x190 [ 321.053386][T10482] do_syscall_64+0x106/0xf80 [ 321.053416][T10482] ? clear_bhb_loop+0x40/0x90 [ 321.053451][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.053480][T10482] RIP: 0033:0x7fb79eb9c629 [ 321.053505][T10482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.053532][T10482] RSP: 002b:00007fb79fa78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 321.053555][T10482] RAX: ffffffffffffffda RBX: 00007fb79ee15fa0 RCX: 00007fb79eb9c629 [ 321.053571][T10482] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 321.053589][T10482] RBP: 00007fb79ec32b39 R08: ffffffffffffffff R09: 0000000000000000 [ 321.053607][T10482] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 321.053625][T10482] R13: 00007fb79ee16038 R14: 00007fb79ee15fa0 R15: 00007ffd98520ea8 [ 321.053664][T10482] [ 321.538796][T10490] FAULT_INJECTION: forcing a failure. [ 321.538796][T10490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.554333][T10490] CPU: 1 UID: 0 PID: 10490 Comm: syz.7.970 Tainted: G U L syzkaller #0 PREEMPT(full) [ 321.554372][T10490] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 321.554381][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.554394][T10490] Call Trace: [ 321.554402][T10490] [ 321.554412][T10490] dump_stack_lvl+0x100/0x190 [ 321.554454][T10490] should_fail_ex.cold+0x5/0xa [ 321.554483][T10490] _copy_to_iter+0x1f3/0x1720 [ 321.554526][T10490] ? __pfx__copy_to_iter+0x10/0x10 [ 321.554570][T10490] ? skb_recv_datagram+0x88/0xc0 [ 321.554612][T10490] ? __pfx_skb_recv_datagram+0x10/0x10 [ 321.554655][T10490] ? __pfx___might_resched+0x10/0x10 [ 321.554699][T10490] packet_recvmsg+0xdff/0x1630 [ 321.554748][T10490] ? __pfx_packet_recvmsg+0x10/0x10 [ 321.554797][T10490] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 321.554838][T10490] sock_recvmsg+0x1f9/0x250 [ 321.554871][T10490] sock_read_iter+0x2c6/0x3c0 [ 321.554901][T10490] ? __pfx_sock_read_iter+0x10/0x10 [ 321.554940][T10490] ? bpf_lsm_file_permission+0x9/0x10 [ 321.554975][T10490] ? security_file_permission+0x76/0x210 [ 321.555012][T10490] ? rw_verify_area+0xce/0x6d0 [ 321.555043][T10490] ? __pfx_sock_read_iter+0x10/0x10 [ 321.555075][T10490] vfs_read+0x957/0xb30 [ 321.555113][T10490] ? __pfx_vfs_read+0x10/0x10 [ 321.555144][T10490] ? find_held_lock+0x2b/0x80 [ 321.555183][T10490] ksys_read+0x1f8/0x250 [ 321.555215][T10490] ? __pfx_ksys_read+0x10/0x10 [ 321.555258][T10490] do_syscall_64+0x106/0xf80 [ 321.555288][T10490] ? clear_bhb_loop+0x40/0x90 [ 321.555322][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.555351][T10490] RIP: 0033:0x7fc99a39c629 [ 321.555375][T10490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.555402][T10490] RSP: 002b:00007fc99b2e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.555428][T10490] RAX: ffffffffffffffda RBX: 00007fc99a615fa0 RCX: 00007fc99a39c629 [ 321.555447][T10490] RDX: 0000000000000f3c RSI: 0000000000000000 RDI: 0000000000000003 [ 321.555462][T10490] RBP: 00007fc99b2e0090 R08: 0000000000000000 R09: 0000000000000000 [ 321.555478][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.555494][T10490] R13: 00007fc99a616038 R14: 00007fc99a615fa0 R15: 00007ffde4a13b08 [ 321.555532][T10490] [ 321.827354][T10492] netlink: 326 bytes leftover after parsing attributes in process `syz.8.969'. [ 322.094064][T10506] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6.0.4294967293), cmd(31) [ 322.164759][T10506] FAULT_INJECTION: forcing a failure. [ 322.164759][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 322.177583][T10506] CPU: 0 UID: 0 PID: 10506 Comm: syz.7.975 Tainted: G U L syzkaller #0 PREEMPT(full) [ 322.177611][T10506] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 322.177617][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.177626][T10506] Call Trace: [ 322.177639][T10506] [ 322.177645][T10506] dump_stack_lvl+0x100/0x190 [ 322.177672][T10506] should_fail_ex.cold+0x5/0xa [ 322.177691][T10506] should_failslab+0xc2/0x120 [ 322.177706][T10506] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 322.177726][T10506] ? security_inode_alloc+0x3b/0x2c0 [ 322.177746][T10506] ? lockdep_init_map_type+0x5c/0x250 [ 322.177768][T10506] security_inode_alloc+0x3b/0x2c0 [ 322.177788][T10506] inode_init_always_gfp+0xced/0x1040 [ 322.177814][T10506] alloc_inode+0x8e/0x250 [ 322.177832][T10506] sock_alloc+0x44/0x280 [ 322.177849][T10506] ? security_socket_create+0x7f/0x250 [ 322.177869][T10506] __sock_create+0xc2/0x860 [ 322.177892][T10506] __sys_socket+0x14d/0x260 [ 322.177912][T10506] ? exc_page_fault+0x6f/0xd0 [ 322.177928][T10506] ? __pfx___sys_socket+0x10/0x10 [ 322.177950][T10506] ? do_user_addr_fault+0x8d6/0x12f0 [ 322.177975][T10506] __x64_sys_socket+0x72/0xb0 [ 322.177995][T10506] ? lockdep_hardirqs_on+0x78/0x100 [ 322.178011][T10506] do_syscall_64+0x106/0xf80 [ 322.178027][T10506] ? clear_bhb_loop+0x40/0x90 [ 322.178045][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.178060][T10506] RIP: 0033:0x7fc99a39dec7 [ 322.178074][T10506] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.178088][T10506] RSP: 002b:00007fc99b2def98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 322.178103][T10506] RAX: ffffffffffffffda RBX: 00007fc99a615fa0 RCX: 00007fc99a39dec7 [ 322.178113][T10506] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 322.178122][T10506] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 322.178130][T10506] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 322.178139][T10506] R13: 00007fc99a616038 R14: 00007fc99a615fa0 R15: 00007ffde4a13b08 [ 322.178159][T10506] [ 322.178191][T10506] socket: no more sockets [ 322.250556][T10509] Invalid ELF header magic: != ELF [ 322.869446][T10528] FAULT_INJECTION: forcing a failure. [ 322.869446][T10528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.942519][T10528] CPU: 1 UID: 0 PID: 10528 Comm: syz.6.979 Tainted: G U L syzkaller #0 PREEMPT(full) [ 322.942567][T10528] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 322.942577][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.942594][T10528] Call Trace: [ 322.942610][T10528] [ 322.942620][T10528] dump_stack_lvl+0x100/0x190 [ 322.942666][T10528] should_fail_ex.cold+0x5/0xa [ 322.942698][T10528] _copy_to_iter+0x1f3/0x1720 [ 322.942747][T10528] ? __pfx__copy_to_iter+0x10/0x10 [ 322.942784][T10528] ? __might_fault+0xc5/0x140 [ 322.942819][T10528] ? __might_fault+0xc5/0x140 [ 322.942869][T10528] simple_copy_to_iter+0x46/0x90 [ 322.942911][T10528] __skb_datagram_iter+0x129/0x900 [ 322.942950][T10528] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 322.942990][T10528] ? __pfx__copy_to_iter+0x10/0x10 [ 322.943032][T10528] ? skb_recv_datagram+0x88/0xc0 [ 322.943078][T10528] skb_copy_datagram_iter+0xa1/0x270 [ 322.943124][T10528] packet_recvmsg+0x220/0x1630 [ 322.943169][T10528] ? __pfx_packet_recvmsg+0x10/0x10 [ 322.943219][T10528] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 322.943263][T10528] sock_recvmsg+0x1f9/0x250 [ 322.943302][T10528] sock_read_iter+0x2c6/0x3c0 [ 322.943339][T10528] ? __pfx_sock_read_iter+0x10/0x10 [ 322.943388][T10528] ? bpf_lsm_file_permission+0x9/0x10 [ 322.943428][T10528] ? security_file_permission+0x76/0x210 [ 322.943473][T10528] ? rw_verify_area+0xce/0x6d0 [ 322.943509][T10528] ? __pfx_sock_read_iter+0x10/0x10 [ 322.943548][T10528] vfs_read+0x957/0xb30 [ 322.943593][T10528] ? __pfx_vfs_read+0x10/0x10 [ 322.943635][T10528] ? find_held_lock+0x2b/0x80 [ 322.943684][T10528] ksys_read+0x1f8/0x250 [ 322.943724][T10528] ? __pfx_ksys_read+0x10/0x10 [ 322.943775][T10528] do_syscall_64+0x106/0xf80 [ 322.943804][T10528] ? clear_bhb_loop+0x40/0x90 [ 322.943838][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.943867][T10528] RIP: 0033:0x7f5f3019c629 [ 322.943889][T10528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.943915][T10528] RSP: 002b:00007f5f310dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.943942][T10528] RAX: ffffffffffffffda RBX: 00007f5f30415fa0 RCX: 00007f5f3019c629 [ 322.943961][T10528] RDX: 0000000000000f3c RSI: 0000000000000000 RDI: 0000000000000003 [ 322.943977][T10528] RBP: 00007f5f310dc090 R08: 0000000000000000 R09: 0000000000000000 [ 322.943994][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.944010][T10528] R13: 00007f5f30416038 R14: 00007f5f30415fa0 R15: 00007ffc2ea35b18 [ 322.944048][T10528] [ 323.489055][T10535] FAULT_INJECTION: forcing a failure. [ 323.489055][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 323.501918][T10535] CPU: 1 UID: 0 PID: 10535 Comm: syz.8.980 Tainted: G U L syzkaller #0 PREEMPT(full) [ 323.501970][T10535] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 323.501981][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.501998][T10535] Call Trace: [ 323.502008][T10535] [ 323.502020][T10535] dump_stack_lvl+0x100/0x190 [ 323.502070][T10535] should_fail_ex.cold+0x5/0xa [ 323.502105][T10535] should_failslab+0xc2/0x120 [ 323.502133][T10535] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 323.502172][T10535] ? do_getname+0x35/0x390 [ 323.502213][T10535] do_getname+0x35/0x390 [ 323.502250][T10535] do_sys_openat2+0xc5/0x1e0 [ 323.502286][T10535] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.502328][T10535] __x64_sys_openat+0x12d/0x210 [ 323.502357][T10535] ? __pfx___x64_sys_openat+0x10/0x10 [ 323.502407][T10535] do_syscall_64+0x106/0xf80 [ 323.502438][T10535] ? clear_bhb_loop+0x40/0x90 [ 323.502474][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.502504][T10535] RIP: 0033:0x7fb79eb9c629 [ 323.502530][T10535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.502565][T10535] RSP: 002b:00007fb79fa78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 323.502590][T10535] RAX: ffffffffffffffda RBX: 00007fb79ee15fa0 RCX: 00007fb79eb9c629 [ 323.502608][T10535] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 323.502623][T10535] RBP: 00007fb79ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 323.502637][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.502652][T10535] R13: 00007fb79ee16038 R14: 00007fb79ee15fa0 R15: 00007ffd98520ea8 [ 323.502686][T10535] [ 324.022122][T10545] FAULT_INJECTION: forcing a failure. [ 324.022122][T10545] name failslab, interval 1, probability 0, space 0, times 0 [ 324.036648][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.6.983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 324.036694][T10545] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 324.036704][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.036720][T10545] Call Trace: [ 324.036730][T10545] [ 324.036739][T10545] dump_stack_lvl+0x100/0x190 [ 324.036785][T10545] should_fail_ex.cold+0x5/0xa [ 324.036818][T10545] should_failslab+0xc2/0x120 [ 324.036845][T10545] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 324.036883][T10545] ? __d_alloc+0x34/0xa80 [ 324.036919][T10545] __d_alloc+0x34/0xa80 [ 324.036950][T10545] d_alloc+0x4a/0x1e0 [ 324.036981][T10545] lookup_one_qstr_excl+0x175/0x250 [ 324.037012][T10545] ? mnt_want_write+0x161/0x450 [ 324.037053][T10545] filename_create+0x1cf/0x400 [ 324.037091][T10545] ? __pfx_filename_create+0x10/0x10 [ 324.037136][T10545] ? find_held_lock+0x2b/0x80 [ 324.037167][T10545] filename_mkdirat+0xb9/0x5e0 [ 324.037198][T10545] ? __pfx_filename_mkdirat+0x10/0x10 [ 324.037226][T10545] ? strncpy_from_user+0x19d/0x2d0 [ 324.037270][T10545] ? do_getname+0x191/0x390 [ 324.037304][T10545] __x64_sys_mkdir+0x6b/0x90 [ 324.037333][T10545] do_syscall_64+0x106/0xf80 [ 324.037361][T10545] ? clear_bhb_loop+0x40/0x90 [ 324.037396][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.037424][T10545] RIP: 0033:0x7f5f3019c629 [ 324.037447][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.037473][T10545] RSP: 002b:00007f5f310dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 324.037500][T10545] RAX: ffffffffffffffda RBX: 00007f5f30415fa0 RCX: 00007f5f3019c629 [ 324.037524][T10545] RDX: 0000000000000000 RSI: 0000000000008003 RDI: 0000200000000100 [ 324.037538][T10545] RBP: 00007f5f30232b39 R08: 0000000000000000 R09: 0000000000000000 [ 324.037554][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.037569][T10545] R13: 00007f5f30416038 R14: 00007f5f30415fa0 R15: 00007ffc2ea35b18 [ 324.037608][T10545] [ 327.887421][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.8.988'. [ 328.226150][T10565] Invalid ELF header magic: != ELF [ 329.335703][T10570] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 329.688782][T10274] Bluetooth: hci1: command 0x0406 tx timeout [ 331.154736][T10590] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 331.902202][T10600] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 331.985369][T10600] smpboot: CPU 1 is now offline [ 333.576751][T10274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.586918][T10274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.597946][T10274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.606271][T10274] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.615028][T10274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.773460][T10603] chnl_net:caif_netlink_parms(): no params data found [ 333.846999][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.855144][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.865840][T10603] bridge_slave_0: entered allmulticast mode [ 333.873860][T10603] bridge_slave_0: entered promiscuous mode [ 333.881880][T10603] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.889456][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.896681][T10603] bridge_slave_1: entered allmulticast mode [ 333.907007][T10603] bridge_slave_1: entered promiscuous mode [ 333.936143][T10603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.951416][T10603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.982697][T10603] team0: Port device team_slave_0 added [ 333.990600][T10603] team0: Port device team_slave_1 added [ 334.021509][T10603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.028609][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.056236][T10603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.070054][T10603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.076991][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.114201][T10603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.156148][T10603] hsr_slave_0: entered promiscuous mode [ 334.163609][T10603] hsr_slave_1: entered promiscuous mode [ 334.173336][T10603] debugfs: 'hsr0' already exists in 'hsr' [ 334.180551][T10603] Cannot create hsr debugfs directory [ 334.336422][T10603] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 334.349669][T10603] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 334.362969][T10603] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 334.373075][T10603] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 334.403685][T10603] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.410843][T10603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.418228][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.425834][T10603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.493285][T10603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.511334][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.521882][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.535006][T10603] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.547806][T10264] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.554973][T10264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.590469][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.597589][T10264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.775706][T10603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.981282][T10603] veth0_vlan: entered promiscuous mode [ 334.993512][T10603] veth1_vlan: entered promiscuous mode [ 335.024309][T10603] veth0_macvtap: entered promiscuous mode [ 335.036733][T10603] veth1_macvtap: entered promiscuous mode [ 335.056699][T10603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.073335][T10603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.086836][T10404] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.103691][T10404] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.125224][T10404] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.187761][T10404] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.216968][T10404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.245053][T10404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.274753][T10264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.285905][T10264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.597317][T10633] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 335.619795][T10630] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 335.688926][T10274] Bluetooth: hci7: command tx timeout [ 336.619477][T10640] input: f as /devices/virtual/input/input14 [ 337.770067][T10274] Bluetooth: hci7: command tx timeout [ 338.093060][T10308] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 338.106428][T10308] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 338.120059][T10308] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 338.127665][T10308] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 338.139737][T10308] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 338.434111][T10653] chnl_net:caif_netlink_parms(): no params data found [ 338.517887][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.525305][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.533005][T10653] bridge_slave_0: entered allmulticast mode [ 338.540826][T10653] bridge_slave_0: entered promiscuous mode [ 338.553939][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.561939][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.569346][T10653] bridge_slave_1: entered allmulticast mode [ 338.584981][T10653] bridge_slave_1: entered promiscuous mode [ 338.619316][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.632096][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.667685][T10653] team0: Port device team_slave_0 added [ 338.676262][T10653] team0: Port device team_slave_1 added [ 338.704213][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.711406][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.741390][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.755310][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.763544][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.793970][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.843001][T10653] hsr_slave_0: entered promiscuous mode [ 338.849500][T10653] hsr_slave_1: entered promiscuous mode [ 338.857567][T10653] debugfs: 'hsr0' already exists in 'hsr' [ 338.863648][T10653] Cannot create hsr debugfs directory [ 338.997261][T10653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.102666][T10653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.134250][ T30] INFO: task syz.0.488:8382 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.153796][ T30] Tainted: G U L syzkaller #0 [ 339.189202][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.215756][ T30] task:syz.0.488 state:D stack:27464 pid:8382 tgid:8381 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 339.249699][ T30] Call Trace: [ 339.255007][ T30] [ 339.257968][ T30] __schedule+0xfee/0x60e0 [ 339.270550][ T30] ? __lock_acquire+0x4a5/0x2630 [ 339.331787][ T30] ? __pfx___schedule+0x10/0x10 [ 339.364901][ T30] ? find_held_lock+0x2b/0x80 [ 339.390587][ T30] ? schedule+0x2bf/0x390 [ 339.394966][ T30] schedule+0xdd/0x390 [ 339.399025][ T30] schedule_preempt_disabled+0x13/0x30 [ 339.418030][ T30] __mutex_lock+0xc9a/0x1b90 [ 339.454374][ T30] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 339.460138][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 339.472935][ T30] ? net_generic+0xea/0x2a0 [ 339.477468][ T30] ? net_generic+0xea/0x2a0 [ 339.490896][ T30] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 339.496642][ T30] nfsd_nl_threads_set_doit+0x718/0xc60 [ 339.519285][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 339.525489][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 339.550684][ T30] ? genl_get_cmd+0x3ef/0x720 [ 339.555432][ T30] ? bpf_lsm_capable+0x9/0x10 [ 339.560096][ T30] ? security_capable+0x80/0x260 [ 339.582720][ T30] genl_rcv_msg+0x560/0x800 [ 339.587259][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.609747][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 339.624665][ T30] netlink_rcv_skb+0x159/0x420 [ 339.629557][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.634991][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.644183][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 339.649506][ T30] genl_rcv+0x28/0x40 [ 339.654014][ T30] netlink_unicast+0x5aa/0x870 [ 339.658790][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 339.664409][ T30] netlink_sendmsg+0x8b0/0xda0 [ 339.669183][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.680808][ T30] ? __import_iovec+0x1d2/0x640 [ 339.685684][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 339.694886][ T30] ____sys_sendmsg+0xa54/0xc30 [ 339.699681][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.705310][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 339.710882][ T30] ___sys_sendmsg+0x190/0x1e0 [ 339.715790][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.721329][ T30] __sys_sendmsg+0x170/0x220 [ 339.726441][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.731936][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 339.736894][ T30] do_syscall_64+0x106/0xf80 [ 339.744665][ T30] ? clear_bhb_loop+0x40/0x90 [ 339.749359][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.755792][ T30] RIP: 0033:0x7f964059c629 [ 339.760210][ T30] RSP: 002b:00007f9641488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.768958][ T30] RAX: ffffffffffffffda RBX: 00007f9640815fa0 RCX: 00007f964059c629 [ 339.793166][ T30] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000002 [ 339.804117][ T30] RBP: 00007f9640632b39 R08: 0000000000000000 R09: 0000000000000000 [ 339.812328][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.820295][ T30] R13: 00007f9640816038 R14: 00007f9640815fa0 R15: 00007fffbd1f2ac8 [ 339.828612][ T30] [ 339.861669][T10274] Bluetooth: hci7: command tx timeout [ 339.871167][ T30] [ 339.871167][ T30] Showing all locks held in the system: [ 339.878902][ T30] 1 lock held by khungtaskd/30: [ 339.904216][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 339.932728][ T30] 2 locks held by getty/5590: [ 339.937435][ T30] #0: ffff8880366430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 339.971246][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 340.001982][ T30] 2 locks held by syz-executor/5822: [ 340.007284][ T30] #0: ffff88802c6dc0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 340.028889][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 340.040676][ T30] 2 locks held by syz.1.372/7865: [ 340.048714][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.057201][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 340.067524][ T30] 2 locks held by syz.0.488/8382: [ 340.072768][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.081227][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 340.093668][ T30] 2 locks held by syz-executor/8731: [ 340.098973][ T30] #0: ffff88801c7240e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 340.109871][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 340.120154][ T30] 2 locks held by syz.4.613/8916: [ 340.125432][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.137403][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 340.153195][ T30] 2 locks held by syz-executor/9230: [ 340.158475][ T30] #0: ffff888031b9c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 340.169248][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 340.180020][T10274] Bluetooth: hci8: command tx timeout [ 340.188367][ T30] 3 locks held by kworker/u11:1/10239: [ 340.194104][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 340.204829][ T30] #1: ffffc90002f07d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 340.215134][ T30] #2: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 340.225300][ T30] 4 locks held by kworker/u11:4/10264: [ 340.230759][ T30] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 340.245256][ T30] #1: ffffc90003e57d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 340.262049][ T30] #2: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 340.271362][ T30] #3: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 340.281684][ T30] 2 locks held by syz-executor/10305: [ 340.287043][ T30] #0: ffff88807e11c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 340.298850][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 340.308750][ T30] 1 lock held by syz.3.959/10456: [ 340.313996][ T30] #0: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 340.323847][ T30] 1 lock held by syz.7.977/10517: [ 340.328859][ T30] #0: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 340.345781][ T30] 1 lock held by syz.7.977/10524: [ 340.350849][ T30] #0: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 340.368666][ T30] 7 locks held by syz-executor/10653: [ 340.375293][ T30] #0: ffff888025d10420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 340.384568][ T30] #1: ffff88802625c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 340.395800][ T30] #2: ffff88802a216008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 340.406135][ T30] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 340.426525][ T30] #4: ffff88805c3180e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 340.437549][ T30] #5: ffff88805c31f250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 340.448404][ T30] #6: ffffffff8e7f4d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 340.461486][ T30] 5 locks held by syz.9.1011/10676: [ 340.466685][ T30] #0: ffff888056c94ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 340.482204][ T30] #1: ffff888056c940c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 340.495560][ T30] #2: ffffffff908a9f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 340.505936][ T30] #3: ffff88802b756af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 340.515506][ T30] #4: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 340.553321][T10653] bridge0: port 3(netdevsim1) entered disabled state [ 340.565855][ T30] [ 340.568200][ T30] ============================================= [ 340.568200][ T30] [ 340.598141][ T30] NMI backtrace for cpu 0 [ 340.598160][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 340.598183][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 340.598188][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.598197][ T30] Call Trace: [ 340.598203][ T30] [ 340.598209][ T30] dump_stack_lvl+0x100/0x190 [ 340.598236][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 340.598259][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.598281][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 340.598305][ T30] sys_info+0x141/0x190 [ 340.598323][ T30] watchdog+0xd25/0x1050 [ 340.598343][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.598357][ T30] ? __kthread_parkme+0x18c/0x230 [ 340.598375][ T30] ? kthread+0x13a/0x450 [ 340.598392][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.598404][ T30] kthread+0x370/0x450 [ 340.598422][ T30] ? __pfx_kthread+0x10/0x10 [ 340.598441][ T30] ret_from_fork+0x754/0xd80 [ 340.598463][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 340.598485][ T30] ? __switch_to+0x7b4/0x1120 [ 340.598501][ T30] ? __pfx_kthread+0x10/0x10 [ 340.598520][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.598558][ T30] [ 340.742447][T10653] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 340.751100][T10653] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 340.760524][T10653] bridge0: port 3(netdevsim1) entered disabled state [ 340.774572][T10653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.799287][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 340.806164][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 340.816930][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 340.822103][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.832142][ T30] Call Trace: [ 340.835405][ T30] [ 340.838320][ T30] dump_stack_lvl+0x100/0x190 [ 340.842993][ T30] vpanic+0x552/0x970 [ 340.846962][ T30] ? __pfx_vpanic+0x10/0x10 [ 340.851450][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 340.857598][ T30] panic+0xd1/0xe0 [ 340.861332][ T30] ? __pfx_panic+0x10/0x10 [ 340.865771][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 340.871916][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 340.878067][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 340.884209][ T30] ? watchdog.cold+0x198/0x1ca [ 340.888957][ T30] ? watchdog+0xd35/0x1050 [ 340.893365][ T30] watchdog.cold+0x1a9/0x1ca [ 340.897946][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.902698][ T30] ? __kthread_parkme+0x18c/0x230 [ 340.907736][ T30] ? kthread+0x13a/0x450 [ 340.911974][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.916661][ T30] kthread+0x370/0x450 [ 340.920740][ T30] ? __pfx_kthread+0x10/0x10 [ 340.925336][ T30] ret_from_fork+0x754/0xd80 [ 340.929925][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 340.935032][ T30] ? __switch_to+0x7b4/0x1120 [ 340.939744][ T30] ? __pfx_kthread+0x10/0x10 [ 340.944326][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.949170][ T30] [ 340.952229][ T30] Kernel Offset: disabled [ 340.956540][ T30] Rebooting in 86400 seconds..