last executing test programs: 2m50.942616698s ago: executing program 32 (id=812): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/pagemap\x00', 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/pagemap\x00', 0x221400, 0x0) read$auto_proc_pagemap_operations_internal(r2, &(0x7f0000000280)=""/216, 0xd8) mknod$auto(&(0x7f0000000240)=':,\x00', 0xfff, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/028/001\x00', 0x86100, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x7f47, r4}) pipe2$auto(&(0x7f0000000000)=r6, 0xda1) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0xa201, 0x0) 2m47.425124212s ago: executing program 0 (id=893): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\xff\xfe\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 2m46.838817165s ago: executing program 0 (id=894): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x105000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto_PR_SET_MDWE(0x41, 0x6, 0x4, 0x154c, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) modify_ldt$auto(0x4, &(0x7f0000000580)="7958bb4684094953", 0x5) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 2m46.491809053s ago: executing program 0 (id=895): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x36, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) 2m32.18491434s ago: executing program 0 (id=924): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) select$auto(0x796, &(0x7f0000000180)={[0xfffffffffffffffc, 0x3, 0x9, 0x1, 0x17d, 0x1, 0x1, 0x6, 0x7, 0x7fff, 0x6, 0x0, 0x100000000, 0x9, 0x9, 0x7fffffffffffffff]}, &(0x7f0000000200)={[0x49aa, 0xffffffffffffff6b, 0x6, 0x3, 0x5, 0x5, 0x6, 0x6, 0xb1, 0x4, 0x6, 0x3, 0xffff, 0xcc9, 0xf57, 0x80]}, 0x0, &(0x7f0000000300)={0x9, 0x8}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_pipe\x00', 0x8a402, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) pread64$auto(r0, 0x0, 0x9, 0x7ffc) r1 = getsockopt$auto_SO_PEERPIDFD(r0, 0x6, 0x4d, &(0x7f0000000040)='/sys/kernel/debug/page_owner\x00', &(0x7f0000000080)=0x47) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000004c0)={{@raw=0x1, 0x5, 0x3, 0xffffff7f, "76f006e37ceb76bfbde3245bee4c6625cb0662ccc64e124db4fedbdd228b9ced12ac206f688d4858a0b558db"}, 0x1, @integer=@value=[0x2, 0x7, 0x9, 0x4, 0x100000000, 0x2, 0x7, 0xf52d, 0x8, 0x77, 0x4, 0x1c2, 0x1, 0x1, 0x9, 0x3, 0x8, 0xfffbfffffffffffd, 0x6, 0x1, 0x1840, 0xfffffffffffffffe, 0x40, 0x5, 0x9, 0x3ff, 0x4, 0x2, 0x3ff, 0x7, 0x101, 0x5, 0x3, 0x0, 0x38a, 0x5, 0x800000000002, 0x7, 0xe, 0xffffffffffffffff, 0x1000, 0x81, 0x80000000, 0x0, 0x81, 0xfe, 0x100, 0x4000, 0x10000, 0x1, 0x100, 0xec00000, 0x185d, 0xe, 0x10000, 0x2, 0x41, 0x6, 0x0, 0x6, 0xfffffffffffffffa, 0x6, 0x7, 0x7ff, 0x5, 0x7, 0x7, 0x5, 0x27d64140, 0x1ff, 0xffffffffffffffff, 0x4, 0x7, 0x3, 0x1ff, 0x200000000081, 0x5, 0x2, 0xfffffffffffff800, 0x9, 0x2, 0x208, 0x547, 0x7, 0x100000000, 0x2, 0x6, 0x7fffffff, 0x5, 0x400, 0x201, 0x8000, 0x80, 0x0, 0xf46, 0x2, 0xfffffffffffffff9, 0x8000000000000000, 0x35, 0x5, 0x8, 0x6, 0x2, 0x9, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0xe4, 0x8000000000000, 0x5, 0x9, 0x7ffffffffffffffc, 0x4, 0x0, 0xfffffdffffffffff, 0x7, 0xfffffffffffffffd, 0x6, 0x0, 0x5, 0x4, 0x40000000000000c0, 0x1400, 0x2000800, 0x6, 0x571a, 0x3], "6b54dd2e739e95a6f217b84988b4581576aaed11b340e4707992930f9a930325903b0e132daa477100a1107a85f3303896b5ec1e61dfb9c0e2698c93ebcd3e1508428d544319376037341d65bb6fb47a002356928a53d1534d8b947cbfcbfba7c7c74e86dc40dc6bca83c523e1e38c31cabf433dd0e3bc1b1b3128e5cf49b23f"}) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xc, @empty}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) open(&(0x7f0000000340)='./file0\x00', 0x90080, 0x80) ioctl$auto(0x3, 0x541b, 0x7f) getsockopt$auto_SO_PASSPIDFD(r1, 0x7fffffff, 0x4c, &(0x7f0000000100)='/dev/snd/controlC0\x00', &(0x7f0000000140)=0x4) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="db1fa10b2b810ac3344bac9736b7cc1f387618a964d36989d41bc43d450af3b92bbd731d50c2597831f63b", 0x2b) 2m31.585458247s ago: executing program 0 (id=928): socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1000000, &(0x7f0000000300)="832d598f5457112e465208ac2fc0a1f862105b23", 0x14, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="811d77c57ff65276b4b6587693d3af05471497f0a51b06e657a279") sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) read$auto(r0, &(0x7f0000000140)='\x00\xee\x8b\xeb]t\xf3\xcc\xc1e!F\xee\x1e`\xce\xf3\xb4,\x8e\x99\x8d\x92\'La\xcb\xc2\x14\xfa\x1c]\x9d-B@\xd4\xdc\x059s\xc8\xd9\x92\x8c\xda\xd7h)\xfeF\xdb[\x99*\xd8\xf7\xf4N\xfe\x1c\x9d6\x9e\xc1Y\xdf\xe61\xb5\x82\xcd\xf16\x9b\xf9\x9c\x9f\x9dF@]y\x82\xd5I\xbbk\xeb\xc7\xe6\xae\xa3]\x06\xb0&L$\xc3#\x04\x92\xcc8\xfem\x1dX\xbe\x1d\x19\xcf[\xea\x9f\tC\xfe\xd1\x84\xc6\xd8\x04\xf2~5\xba\"\xbd4.\xf6\x86\x83h\xf8i\xb4\xa7a,\xa8#\xa0O1\xed\xf1\xe5\x0f\xe2\x8dh\x03\x01\xcf\xd6\xa7;f\x97\x87', 0x91de) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) getpgid$auto(0x0) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x1000000, &(0x7f0000000300)="832d598f5457112e465208ac2fc0a1f862105b23", 0x14, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="811d77c57ff65276b4b6587693d3af05471497f0a51b06e657a279") (async) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) read$auto(r0, &(0x7f0000000140)='\x00\xee\x8b\xeb]t\xf3\xcc\xc1e!F\xee\x1e`\xce\xf3\xb4,\x8e\x99\x8d\x92\'La\xcb\xc2\x14\xfa\x1c]\x9d-B@\xd4\xdc\x059s\xc8\xd9\x92\x8c\xda\xd7h)\xfeF\xdb[\x99*\xd8\xf7\xf4N\xfe\x1c\x9d6\x9e\xc1Y\xdf\xe61\xb5\x82\xcd\xf16\x9b\xf9\x9c\x9f\x9dF@]y\x82\xd5I\xbbk\xeb\xc7\xe6\xae\xa3]\x06\xb0&L$\xc3#\x04\x92\xcc8\xfem\x1dX\xbe\x1d\x19\xcf[\xea\x9f\tC\xfe\xd1\x84\xc6\xd8\x04\xf2~5\xba\"\xbd4.\xf6\x86\x83h\xf8i\xb4\xa7a,\xa8#\xa0O1\xed\xf1\xe5\x0f\xe2\x8dh\x03\x01\xcf\xd6\xa7;f\x97\x87', 0x91de) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) (async) getpgid$auto(0x0) (async) 2m31.227113286s ago: executing program 0 (id=930): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24040070}, 0x800) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x8001, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x7, 0x1ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0xc7, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x20000000000180, 0x6, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000010, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x10000000004]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) 2m15.846906513s ago: executing program 33 (id=930): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24040070}, 0x800) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x8001, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x7, 0x1ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0xc7, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x20000000000180, 0x6, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000010, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x10000000004]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) 2m9.4046796s ago: executing program 3 (id=1020): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000005380)='/sys/kernel/debug/ieee80211/phy1/hwsim/dfs_simulate_radar\x00', 0x0, 0x0) madvise$auto_MADV_NORMAL(0x9304, 0x7ff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) eventfd$auto(0x7) statmount$auto(0x0, 0x0, 0x1fe, 0x1) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) 2m7.9195054s ago: executing program 3 (id=1029): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x105000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto_PR_SET_MDWE(0x41, 0x6, 0x4, 0x154c, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x17c) modify_ldt$auto(0x4, &(0x7f0000000580)="7958bb4684094953", 0x5) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 2m7.760617528s ago: executing program 3 (id=1025): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) write$auto(0x3, 0x0, 0x100082) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port3/location\x00', 0x0, 0x0) semctl$auto_SETALL(0x9, 0xd, 0x11, 0x8) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x121000, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) close_range$auto(r4, r1, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m6.692297271s ago: executing program 5 (id=991): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x4, 0x1, 0x4000000000df, 0xeb1, r0, 0x100000018) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) socket(0xa, 0x3, 0x3b) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)='+') socket(0xa, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x11, 0x0, 0x567) ppoll$auto(&(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x4}, 0x7f, 0x0, 0x0, 0x8) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r2, 0x5422, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/026/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)={0x4, 0x81, 0x10001, 0x5, &(0x7f0000000000), 0x40000005, 0xffffffff, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0}) 2m6.570364195s ago: executing program 3 (id=1028): r0 = socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x40400, 0x0) r3 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000540)={r2, &(0x7f00000002c0)="01f998ea13ad66d31e175ad244eebe2ba0a823686a1feaae2132eddfdc8632e9709e9954737a2329471db0a7f7bd59fbb31eb6621bcfb65ab552544a44206828c4aecaed71a58cfe77d90d13418bbcf956599944dc8c38590d8dc92d1cb869659c2881a20832193c2998fff8bb1cc410b7141e39807c6dcdc5b8c5cae8b40ffc5cc0ca49a8b95c8b14de8beb0fad6f033c346fb5ffed895f90af34010c591ddab8e20a2689d9dff3165400b53ac5cccdb88b5729377ee0a0abad4cc572f8bd6df19c590b5efcb7ffb3e3d666998b57966f1b3040cd4a08fa7eb5993a0eaac59cfab4e3477cb7af489c67f988e5e302b5ad344359ef2b", 0x1, &(0x7f00000003c0)="b3caf323fa44d9e8ed220d4c2f0f71493f17eecc5a95c2079d0c39bdf1df1e812e4a41e22c1679b0447335cdc0c583e6081e29cfec54280879fd135f0d5cde161d885b64a1df4cba4822f6f41a4e3e87e293dcbd0d7538193a9e1838755e8e624c5360d276cb61ea14a1bdf9954117f8bb382e280ac5", 0x5, &(0x7f0000000440)="ca10869a9c798fa457402c2727baec9057f753829f032d3795ebd3b8d19b8e1017e93ae60c0cbb59183d4eeb3f2306966e300a735069d26333de261cf4ce12f74dee9ea30811312e7dd178db7cb926bd1db44518906deb0f4114432cbdb7c25e380d74249159086bfcd4a6799b3b17a736b5fa44c6fd7f58041258e2b5733af333d06b80f66c37957980e9140d", &(0x7f0000000500)=0x4}) prctl$auto(0xf, 0x1, 0x4, 0x5, 0x7) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001a14af"], 0x14}}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="05082cbd7000fbdbdf257e000000000000ffe9ff00000000fbcdcf723761e464cc2327ce89ce96a5082aecdbbbdb9b60b1d9000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x208, r8, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_REKEY_DATA={0x1db, 0x7a, 0x0, 0x1, [@typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0xd695}, @nested={0xd6, 0x9e, 0x0, 0x1, [@nested={0x4, 0xac}, @generic="f9c4259c523bc478633b6d6363733a2d22540d928f105532a9b90424b76c826ae968f9cf0305c178d0016d428d668734c379db577c747ce5a6f2ea664fa7c350defe399049cbcbeb7cebfaa91f5351cd3bcb3ab066d44c4df2d9a539a2832b0e1011244727273849abc1cfdcf7d0f40d19ec690c9fa835c9875bab73e0acbc99b281611f7b8f0b0563f18726efd8744d3bb50d7464b8bd065b4d57602a946e33c6ca972049f23149895ee3aa82ed6a1abaaf8332953e0ea0ba765bb3bf2311e51d81a2705ea488efc2fb", @generic, @nested={0x4, 0x6e}]}, @generic="459e6f6b4f2c0a89e547d7dad38726ec8b2fad3230b91061c9144441c3b97cc8ec49e2c6ff51afd1d899d835ea0e94d77f4a699e43fb2aadeba8d75b0af10bff1842a71a92d72fb2653f6da1dac716bdfebf5dfe17a649c5201ae31417f1737aba4dd10c14b3836f5a5070ff59ea748223c511ed655600d9d05a0294fb0ea41d18331de01b6db70d653061f62bf8c60d13caaf819da6198608801a30fa3a505c18f8031e434d15a02376dbae7d4174b97365a4b211e63222b40de44b3f67cc6b8328de0dfc450a10432f27a0f76c871ee41c72fdfd398435698de6148d24b2f5d662533a4cfd623f8122c0"]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfe5}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x208}}, 0x400d1) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r4, 0x80044dfe, &(0x7f0000000000)="4c1fca9e32899aebf430dbd5208a10183f03fc395e4ed65e9db71ce3ce99ec5299a705befb0967f74cf8aa50d3ff921bef1ee0f8ede96942456376f2794fa3fed8851170687fa598af7e1da5ba37cec100c2ab55370d8b050171fbe0a466ac50321d29811bc0351c38e35d4f2e1066fdc3f256cbd6e39a126a81e7453c9024e21af40b7fa6c4f152e485d0c07c3aaaf42e1fbe72f79cb33a641e192245585d16640a4f7f18287756759c") bind$auto(r0, &(0x7f0000000040)=@sco, 0x50b0) 2m6.393629269s ago: executing program 5 (id=1030): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x105000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto_PR_SET_MDWE(0x41, 0x6, 0x4, 0x154c, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x17c) modify_ldt$auto(0x4, &(0x7f0000000580)="7958bb4684094953", 0x5) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 2m6.225736549s ago: executing program 3 (id=1031): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x3, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x1f, 0x0) ppoll$auto(&(0x7f0000000100)={0xffffffffffffffff, 0x690, 0xffa1}, 0x5, 0x0, &(0x7f0000000140)={0x4}, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) getdents$auto(r0, 0x0, 0x62d4) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0xffffffffffff0001) 2m6.163924561s ago: executing program 5 (id=1033): mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) uname$auto(&(0x7f0000000000)={"94cc9722afb522a98e858030365ed92ab89306efe384a20d71e300cb1c508bc870a9a4b84e7f1ca41f999a6379237082d6768f980d3f33de4646a8f1ebeeca15bf", "38e383904ea86c9933e9d7e064b0550600000000000000a0fbed58ef6fb19193d70e497c6d2f046d4eb5af7300", "f97ade924a06a62e97c4aeb7a67a2296cdf8b7bbd381d911ccf3fe97481a08be5f5e6983e31c98d834fa81d0e696e41c1a6a00", "7f4d1cd3d8873504031be24207e98792374255ae55b488e067810cd4d18379ac432e2f868bfda64b5c62baaa5c905c996d4ea95b70567c215e1cf3706874b815de", "02479756de75addea4dd0ce6b31411ef92f3d201417055935ee51d552f7f4c86bdaac10b56dcdc45b2f999b3d9ac039d2f2947ed62cbc65c73b6d5b10432ebc979", "b54f83a0546668487dd19a0e2b69cc7d72570fd5b450322ed8ca16b1aa8f6bc38c26b78c7997f9f3f0697ea521051a7c40b88f8d873858402f0be3d6c84174efab"}) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x3, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) clone$auto(0x20003b4a, 0x2, 0x0, 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000200)='\xc4\x00\x00\xd7\x1d\x12\xf9\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\by', 0x1004) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005200)=ANY=[@ANYBLOB="a8410000", @ANYRES16=r2, @ANYBLOB="010326bd7000fedbdf250800000094410480301409802db7f29c531fea40eec793e5c9662c9bed0cbc6bb011947fe6c4cc8c03de5dda365d5056d3482fbd8f90e9addfca827d233a2b80a814782f9a0c3a3d2085d92977eaa77645f9323d2b8ecf9f2f1bc4dbe4cda414fd3f0268a1785e30b7fc6a3927ecc485bc6574d9e1ed1e327da4421859a36be73d1bfaaceadf85d2a7ab81f6bcf83826063eca08468758b4689e8ced1fc6c48ad6e86e6d2bc0454483570c7de80e26e83799a5da52980108a1bf6b9fcf5296f03a48027622d441ae9468758b2ecda179ac6964a6cbb4b2f408002c00", @ANYRES32=0x0, @ANYBLOB="0800f100060000004b00e3807614861770bd5576dd0ae216c4b5d2ad11f6dec2bb7099747782da224698d89116dea2a276dd1aa26d443ea55341d10fe0fc79eff05a87d67aba7504006d8008003200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400228008004d002d2e26002bc754dd91e0bebf63afa53a110699c92d7ba78f59309c1cce2209bbaadd128c8283ebd1c425c50000182806"], 0x41a8}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) mmap$auto(0x400000000000, 0x9, 0x7, 0x800000000c812, 0x3, 0x0) ftruncate$auto(0x3, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, r1, 0x300000000000) 2m5.918978606s ago: executing program 3 (id=1034): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r0, 0x0, 0x10007c) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x2003ec, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) sendmsg$auto_TIPC_NL_SOCK_GET(r3, &(0x7f0000003ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x5}) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) epoll_create$auto(0x8800001) 2m5.394435095s ago: executing program 5 (id=1038): pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) setsockopt$auto(0xffffffffffffffff, 0xc, 0xc56e, 0x0, 0x5) (async) unshare$auto(0x40000080) (async) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) ioctl$auto_TUNDETACHFILTER(r0, 0x401054d6, &(0x7f00000000c0)={0x806, &(0x7f0000000040)={0x7f, 0x37, 0x9, @raw=0x800}}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) (async) write$auto(0x3, 0x0, 0xffd8) prctl$auto(0x8, 0x674, 0x0, 0x6, 0x8) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x18bd01, 0x0) ioctl$auto_USBDEVFS_BULK(r1, 0xc0185502, 0x0) (async) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b7c, 0x2, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) sendto$auto(0x3, 0x0, 0x2000d, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2m4.304061736s ago: executing program 5 (id=1043): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x3, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x1f, 0x0) ppoll$auto(&(0x7f0000000100)={0xffffffffffffffff, 0x690, 0xffa1}, 0x5, 0x0, &(0x7f0000000140)={0x4}, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) getdents$auto(r0, 0x0, 0x62d4) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0xffffffffffff0001) 2m3.927404796s ago: executing program 5 (id=1045): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x3, 0x7, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x10, 0x7, 0x7, 0x1, 0x5319, 0x71, 0x6, 0xfffffffffffffff8, 0x40, 0x9}) rename$auto(&(0x7f0000000180)='.\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') timerfd_create$auto(0x9, 0x0) r0 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r1, 0x901064ae, 0x4) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1m50.410616181s ago: executing program 34 (id=1034): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r0, 0x0, 0x10007c) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x2003ec, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) sendmsg$auto_TIPC_NL_SOCK_GET(r3, &(0x7f0000003ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x5}) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) epoll_create$auto(0x8800001) 1m48.732205193s ago: executing program 35 (id=1045): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x3, 0x7, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x10, 0x7, 0x7, 0x1, 0x5319, 0x71, 0x6, 0xfffffffffffffff8, 0x40, 0x9}) rename$auto(&(0x7f0000000180)='.\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') timerfd_create$auto(0x9, 0x0) r0 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r1, 0x901064ae, 0x4) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1m37.542697971s ago: executing program 7 (id=1092): unshare$auto(0x20000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x20000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x27) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000005ec0), r2) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000000000)={0x28, r3, 0x1, 0x9, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_NAME={0xe, 0x3, 'ovs_vport\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x6040) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') close_range$auto(0x2, 0xa, 0x0) 1m37.250735423s ago: executing program 7 (id=1094): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}, &(0x7f0000000140)={0x9, 0x1}) clone$auto(0x9e94, 0xa5, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x8001, 0x6aa0cbdd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xf8, 0x0, 0x0, @binary}]}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x54e) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000a80)=@bpf_attr_3={0x0, 0x1, 0x100000001, 0x2, 0x2, 0x6, 0x6120865b, 0x10, 0xccb, "411ee11343ab7a378e52fa1977c7bc4c", 0x0, 0x7, 0xffffffffffffffff, 0x8001, 0xc, 0x2, 0x8, 0x8, 0x7, 0x8, @attach_btf_obj_fd, 0x825e, 0x1, 0x2, 0x80000001, 0x5}, 0x100) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r3, 0x0, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000300)="de91b83a075ce51fff544f85b0b6d328f3beb9b8634fd16bf2701cb13a2d93abd414c9a1586e4fbc7b163c42c4783614b2dcf995a43c8cf63d102facaebb7019f67c4241ee77139ef43eac615fcf4ca071ad7ecd284cb135be34415cca234d6a11827f2178354b81a06111504ccdbebb0a5fe8cce82085a67d2b34e551a52a59", 0x80) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) setns(0xffffffffffffffff, 0x2000000) shmctl$auto(0x1d, 0x58, &(0x7f0000000340)={{0x2, 0xee00, 0xee01, 0x6, 0x9, 0x7, 0x5}, 0x2, 0xfffffffffffffffd, 0x7, 0x7, @raw=0x6, @raw=0xbe, 0x1, 0x0, &(0x7f0000000180), &(0x7f0000000240)="0ef32451a60d2cc131fc3bd79f24803892096ce0b6f220150548040098f54447a216bb9ebffa36194bb2811eaf5f8d4d34264b16821295d4fe6bf68c4c2007f60a394f3cf79e0fe1f0decdd2f3a9e30143e5e8e80e7d7a4397d59dad8c6196617da6e6a905e8a6bd1676c13a150fe05dee9f52d591926ac06e243d419e6eb862c59f6bf2f42a55224b3233a82e8068b35229f3b4f5ce6de7440e1b56fe0fe5aa5b444d061d7eb1d011468b205134e67467c67e44b3b97e50a41751492683f287af2f26885424398735818c5f81c7c6848cfaf6334fa40006d78284e1fcda7cf198e3ae0a12fbe6322886b83665ed4487d5d6a78300e9be7d94"}) quotactl_fd$auto(r6, 0x2, r8, &(0x7f00000003c0)="9f52291e498685be2776eab6237834e85f2e25e426a9a6f2a804cd74d3a8a02c9b9d3638d79138a8e5c3b0088e9e776f5f0c5922dd86f7211af986aab3bf") r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}]}, 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) sendmsg$auto_NL80211_CMD_GET_STATION(r4, 0x0, 0x24044081) fcntl$auto_F_GETOWN(r5, 0x9, 0x1) 1m36.651319931s ago: executing program 7 (id=1098): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/nfs\x00', 0x50201, 0x0) pread64$auto(r0, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)="c794", 0x1) mmap$auto(0x1, 0x2020009, 0x4000000000000003, 0x14, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec6\x00', 0x80001, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={"dc5f0f51", 0x9b4, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x5, 0x6, 0x7, 0x1, 0x2, 0x7fffffff, 'f\x00\b\x00', 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) 1m35.867819739s ago: executing program 7 (id=1101): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x10000]}, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000000)=@batch={0xc000000000000000, 0x8, 0x2, 0x2, 0xe, 0xffffffffffffffff, 0x1, 0xa37c}, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24008895}, 0x20000800) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x20280, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x80, &(0x7f0000000180)={0x0, 0xb, 0x40, @raw=0xd}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m34.919689452s ago: executing program 7 (id=1107): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf252b000000180028ea61505501802fb02e4776657468315f746f5f626f"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, r2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x0, 0xffffffffffffffff, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x400000200005, 0x7) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_MSG_INFO(0xfe0, 0xc, &(0x7f0000000180)={{0xf, 0xee01, 0xee00, 0x8, 0x209, 0x7, 0xb}, 0x0, 0x0, 0x0, 0x8, 0xd, 0x45, 0x8, 0x7, 0xffff, 0xff, @inferred, @raw=0x6}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(0x3, 0x0, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101005, 0x0) mmap$auto(0xfffffffffffffffd, 0x9, 0xa2, 0x8000008b71, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) r3 = io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0x1000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffd) socket(0x2, 0x80802, 0x2) socket(0x2b, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@ethernet={0x6, @remote}, 0x20006a) 1m33.724209474s ago: executing program 7 (id=1112): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, 0x0, 0x50) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41) (async) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f0000000000), 0x5a7, &(0x7f0000000180)={&(0x7f0000000300)="669b0c0c4afa2f", 0x28}, 0x1, &(0x7f0000000040), 0x5, 0x3}, 0x3}, 0x2, 0x8) (async) read$auto(r0, 0x0, 0x80) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) ioctl$auto_UI_SET_ABSBIT(r5, 0x40045567, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000380)={0x103700, &(0x7f0000002380)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_FIFREEZE(r6, 0xc0045878, 0x1) 1m18.564995357s ago: executing program 36 (id=1112): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, 0x0, 0x50) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41) (async) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f0000000000), 0x5a7, &(0x7f0000000180)={&(0x7f0000000300)="669b0c0c4afa2f", 0x28}, 0x1, &(0x7f0000000040), 0x5, 0x3}, 0x3}, 0x2, 0x8) (async) read$auto(r0, 0x0, 0x80) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) ioctl$auto_UI_SET_ABSBIT(r5, 0x40045567, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000380)={0x103700, &(0x7f0000002380)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_FIFREEZE(r6, 0xc0045878, 0x1) 56.679384039s ago: executing program 2 (id=1272): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) select$auto(0x796, &(0x7f0000000180)={[0xfffffffffffffffc, 0x3, 0x9, 0x1, 0x17d, 0x1, 0x1, 0x6, 0x7, 0x7fff, 0x6, 0x0, 0x100000000, 0x9, 0x9, 0x7fffffffffffffff]}, &(0x7f0000000200)={[0x49aa, 0xffffffffffffff6b, 0x6, 0x3, 0x5, 0x5, 0x6, 0x6, 0xb1, 0x4, 0x6, 0x3, 0xffff, 0xcc9, 0xf57, 0x80]}, 0x0, &(0x7f0000000300)={0x9, 0x8}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_pipe\x00', 0x8a402, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) pread64$auto(r0, 0x0, 0x9, 0x7ffc) r1 = getsockopt$auto_SO_PEERPIDFD(r0, 0x6, 0x4d, &(0x7f0000000040)='/sys/kernel/debug/page_owner\x00', &(0x7f0000000080)=0x47) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000004c0)={{@raw=0x1, 0x5, 0x3, 0xffffff7f, "76f006e37ceb76bfbde3245bee4c6625cb0662ccc64e124db4fedbdd228b9ced12ac206f688d4858a0b558db"}, 0x1, @integer=@value=[0x2, 0x7, 0x9, 0x4, 0x100000000, 0x2, 0x7, 0xf52d, 0x8, 0x77, 0x4, 0x1c2, 0x1, 0x1, 0x9, 0x3, 0x8, 0xfffbfffffffffffd, 0x6, 0x1, 0x1840, 0xfffffffffffffffe, 0x40, 0x5, 0x9, 0x3ff, 0x4, 0x2, 0x3ff, 0x7, 0x101, 0x5, 0x3, 0x0, 0x38a, 0x5, 0x800000000002, 0x7, 0xe, 0xffffffffffffffff, 0x1000, 0x81, 0x80000000, 0x0, 0x81, 0xfe, 0x100, 0x4000, 0x10000, 0x1, 0x100, 0xec00000, 0x185d, 0xe, 0x10000, 0x2, 0x41, 0x6, 0x0, 0x6, 0xfffffffffffffffa, 0x6, 0x7, 0x7ff, 0x5, 0x7, 0x7, 0x5, 0x27d64140, 0x1ff, 0xffffffffffffffff, 0x4, 0x7, 0x3, 0x1ff, 0x200000000081, 0x5, 0x2, 0xfffffffffffff800, 0x9, 0x2, 0x208, 0x547, 0x7, 0x100000000, 0x2, 0x6, 0x7fffffff, 0x5, 0x400, 0x201, 0x8000, 0x80, 0x0, 0xf46, 0x2, 0xfffffffffffffff9, 0x8000000000000000, 0x35, 0x5, 0x8, 0x6, 0x2, 0x9, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0xe4, 0x8000000000000, 0x5, 0x9, 0x7ffffffffffffffc, 0x4, 0x0, 0xfffffdffffffffff, 0x7, 0xfffffffffffffffd, 0x6, 0x0, 0x5, 0x4, 0x40000000000000c0, 0x1400, 0x2000800, 0x6, 0x571a, 0x3], "6b54dd2e739e95a6f217b84988b4581576aaed11b340e4707992930f9a930325903b0e132daa477100a1107a85f3303896b5ec1e61dfb9c0e2698c93ebcd3e1508428d544319376037341d65bb6fb47a002356928a53d1534d8b947cbfcbfba7c7c74e86dc40dc6bca83c523e1e38c31cabf433dd0e3bc1b1b3128e5cf49b23f"}) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xc, @empty}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) open(&(0x7f0000000340)='./file0\x00', 0x90080, 0x80) ioctl$auto(0x3, 0x541b, 0x7f) getsockopt$auto_SO_PASSPIDFD(r1, 0x7fffffff, 0x4c, &(0x7f0000000100)='/dev/snd/controlC0\x00', &(0x7f0000000140)=0x4) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="db1fa10b2b810ac3344bac9736b7cc1f387618a964d36989d41bc43d450af3b92bbd", 0x22) 54.668790712s ago: executing program 6 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), r0) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf650a00000008000200", @ANYRES32, @ANYBLOB="0800030000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) listen$auto(0x3, 0x81) read$auto(r2, 0x0, 0x7) close_range$auto(0x2, r2, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) listen$auto(0x3, 0x81) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x11, 0x0, 0x10) (async) modify_ldt$auto(0x11, 0x0, 0x10) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 53.954500906s ago: executing program 6 (id=1280): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001300)={0x2, 0x80, 0x3, 0x5, &(0x7f0000000040)="2301", 0x946, 0x3, 0x80005, @stream_id=0x2, 0x20047, 0x9, 0x0, [{0x401, 0x8, 0x10001}, {0x7ff, 0x80b8, 0x5}, {0x4, 0x100, 0x6}, {0x8, 0x0, 0x3}]}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x4ea02, 0x0) mmap$auto(0x6, 0x3, 0x400000000fdb, 0x8000000008015, 0x3, 0x8000) r1 = socket(0xa, 0x3, 0xfffff129) close$auto(r1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) r2 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) ioctl$auto_TIOCGETD2(r2, 0x5424, &(0x7f00000000c0)="d4a922f9527adb91296b350d81ecdfb47013e5694596e86bb9c0bb7da0917bfc96089f6854e37ed1ae3d3f23db4bdb7a5e3f3f5e531ccb63187d1fae2221451bdc45f8b13bf9d33a0a7267fd9d3470b1732f5aae1fd2a1dc3955df05616ec65ffe0b64262dc223a5eba888c6e4b842c62d52fe0055e8e15543bfcbd82bb40ef1df886aee16a90f60376cb1a07f54d0d2b08bb4a7d2452f4a30101b37b1e93d55674a8495eb024e19a7c93f2f363089112eb02496b24f44d185880e1accfb4f00b7a0480d8a2b1144e839d5253c11cf946093ab36a38d7d65d5f121c800f2e0a108e8fc5508acc501b92f") unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x401, 0xa2, @_sigchld={0x0, 0x0, 0x2, 0x2d, 0x652c}}}, 0x5, &(0x7f0000000240)={{0xc4d, 0xffffffffffffff37}, {0x34, 0x5}, 0x5, 0x1, 0x9, 0x6, 0x4, 0x1, 0xf, 0x6, 0xf, 0x7f, 0x6, 0x5e97, 0xd, 0x5}) migrate_pages$auto(0x0, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x3) prctl$auto(0x4d, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/3/smp_affinity_list\x00', 0x40, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000300)=""/4096, 0x1000) futex$auto(0x0, 0xa, 0xf, 0x0, 0x0, 0x10005) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x304) 53.721914313s ago: executing program 2 (id=1281): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\xff\xfe\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 53.69904182s ago: executing program 6 (id=1282): r0 = socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0x181f82, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000c80060009800100010012000100898771181f6fc5308db43c2120e19014e2e497f1c19f17790485908286dd000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000340)=0x3) ioctl$auto(r5, 0x1, r6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f0000000100)={0x3, 0x7f}, 0x0, 0x8) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x80000, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/019/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_DISCARDURB(r7, 0x550b, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xcb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40040) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xd0d6000, 0xb, 0x6) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60f8bcff", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/conf/bond0/force_igmp_version\x00', 0x242, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x49288d8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x120, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_MAC_MASK={0xfa, 0xd7, "f2b3cda0714e6c01cc2aff4fcbdb9bc4460a98d072440dc65248e021963ebe0353184b428f000152b3784f2fdb75b6b0a9fbcfd2605404980c3ef2a7b22d9fa00536355e0f0b27fe0bcf95899296d641e0a90d9a56d1ad3780cdfae430b9a68203e6d9fa28f93efabfff83a7503d6e9e0d71896ac4b70cfb19be0743f3ff71825273cdfe4db76628ce65859d2fd866244f97a7c6c88833521943106836f8b2360f04c66123d621be1d0c6c8d7a561b7e45a0c5f28714c02605d4022efcfb19fa9d8fb5db8c83b8ab63d9b9ec9b43cea253c8b6683d441f68ebec9f731f6efc4333cc63d8b46260b3b20ff0fbd17da243facc7214b413"}]}, 0x120}, 0x1, 0x0, 0x0, 0x24000804}, 0x8001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 53.376592192s ago: executing program 6 (id=1285): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x140c0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x480, 0x2, 0x0, 0x1, 0x8000000000000001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) 53.280450181s ago: executing program 2 (id=1286): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000000)=@batch={0xc000000000000000, 0x8, 0x2, 0x2, 0xe, 0xffffffffffffffff, 0x1, 0xa37c}, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24008895}, 0x20000800) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x20280, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x80, &(0x7f0000000180)={0x0, 0xb, 0x40, @raw=0xd}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 52.048723986s ago: executing program 6 (id=1290): socket(0x21, 0x2, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67be, 0x7ff) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x8, 0xfffffffffffffff7, 0x7, 0xffffffff, r0, 0x66) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b002608000380040003800400028000"/30], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x218d41, 0x0) mmap$auto(0x1000000000000, 0x0, 0x4000000000df, 0x17, r2, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004811}, 0x8000) select$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x44) 52.039392905s ago: executing program 2 (id=1291): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) r0 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB='{o'], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto_MADV_NORMAL(0x9304, 0x7ff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) eventfd$auto(0x7) statmount$auto(0x0, 0x0, 0x1fe, 0x1) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) 51.737660804s ago: executing program 6 (id=1292): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc3, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x9) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) (async) bind$auto(0x3, 0x0, 0x6b) (async) listen$auto(0x3, 0x81) listen$auto(0x3, 0x81) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyw0\x00', 0x101840, 0x0) ioctl$auto(r0, 0x540f, 0xffffffffffffffff) 51.468118629s ago: executing program 2 (id=1293): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) preadv$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8000}, 0x9, 0x4000ff, 0xfffffffffffffffe) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0) (async) r1 = socket(0x2b, 0x1, 0x1) (async, rerun: 64) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/stations/08:02:11:00:00:00/last_seq_ctrl\x00', 0x88000, 0x0) (rerun: 64) read$auto(r2, &(0x7f0000001200)='\x00', 0x4) (async) setsockopt$auto(r1, 0x0, 0x28, 0x0, 0xc) (async) write$auto_console_fops_tty_io(r0, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) (async) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x101, 0x2, 0x0, 0x0) (async) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) (async) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/module/parameters/sig_enforce\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, r4, 0x0) (async, rerun: 64) socketpair$auto(0x8b3, 0x89, 0x7, &(0x7f0000000000)=0x2) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/erspan0/flags\x00', 0x2062, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) 50.44975649s ago: executing program 2 (id=1296): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x7fff, 0x400008, 0xe3, 0x9b7e, r1, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x27) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb6, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x3}, 0xfffffffffffffff8, 0x3, 0x5, 0xff, 0x0, 0x16, 0x1, 0x4000000000000aac, 0x1, 0x2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7400fcdbdf13140000000c000180080001003848f90ec30cae1239810000002eae2048e2503cced77d23061c742730f8a9314848dcf96fd2fecfde01315b9edb33af667fd44b1407f5bc9ffa7edeb73c5073ce9098f75ee317840d95867cba5259d758b5b872c6e9f1e704980cf4d4a48d4e78a8bfadec9be6966c1bfc2e03f2da6f623583f2280bc5694a346e0fad7e4bb1e3e6948d926ad5f8ad7f20cf3def9bcd4bbfb0bfa0ba481886473a05548d14af99388f2373598208b45c598faf72aef938ab52399e8adc93d78f0f9f4ca44ae59f949d692d3c7b019eecbf28af545d483c809e7d820df99cbfe5c770e33d5fa434f6", @ANYRES32=r6, @ANYBLOB="050018000100000008001000040000000800090006000000"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0xfffffffffffffffc, 0x200000000003, 0x4000000000df, 0x40eb1, r7, 0x300000000000) socket(0x2a, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) r8 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "00000000000000010000003ec83ce63f", 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x7, 0x6}, 0xf) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r3, 0x10000000084, 0x2, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 36.630642645s ago: executing program 37 (id=1292): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc3, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x9) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) (async) bind$auto(0x3, 0x0, 0x6b) (async) listen$auto(0x3, 0x81) listen$auto(0x3, 0x81) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyw0\x00', 0x101840, 0x0) ioctl$auto(r0, 0x540f, 0xffffffffffffffff) 34.725726584s ago: executing program 38 (id=1296): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x7fff, 0x400008, 0xe3, 0x9b7e, r1, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x27) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb6, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x3}, 0xfffffffffffffff8, 0x3, 0x5, 0xff, 0x0, 0x16, 0x1, 0x4000000000000aac, 0x1, 0x2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7400fcdbdf13140000000c000180080001003848f90ec30cae1239810000002eae2048e2503cced77d23061c742730f8a9314848dcf96fd2fecfde01315b9edb33af667fd44b1407f5bc9ffa7edeb73c5073ce9098f75ee317840d95867cba5259d758b5b872c6e9f1e704980cf4d4a48d4e78a8bfadec9be6966c1bfc2e03f2da6f623583f2280bc5694a346e0fad7e4bb1e3e6948d926ad5f8ad7f20cf3def9bcd4bbfb0bfa0ba481886473a05548d14af99388f2373598208b45c598faf72aef938ab52399e8adc93d78f0f9f4ca44ae59f949d692d3c7b019eecbf28af545d483c809e7d820df99cbfe5c770e33d5fa434f6", @ANYRES32=r6, @ANYBLOB="050018000100000008001000040000000800090006000000"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0xfffffffffffffffc, 0x200000000003, 0x4000000000df, 0x40eb1, r7, 0x300000000000) socket(0x2a, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) r8 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "00000000000000010000003ec83ce63f", 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x7, 0x6}, 0xf) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r3, 0x10000000084, 0x2, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 23.002660117s ago: executing program 4 (id=1348): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) fanotify_init$auto(0x602, 0x1) open(0x0, 0x662c2, 0xe1d2b27bdc14aa0c) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x6, 0x3, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4\x05\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r1, 0x5111, 0x0) 21.329366738s ago: executing program 4 (id=1353): rt_sigpending$auto(0x0, 0x7ffffffff000) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/pf_guest\x00', 0x101800, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, &(0x7f00000012c0)=""/22, 0x16) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c000200000000c0ffffffff"], 0x24}}, 0x20040000) 20.972024884s ago: executing program 4 (id=1354): madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000020df, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00'}) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x16, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) bpf$auto(0x200005, 0x0, 0x4a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) syz_clone3(0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8003) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8955, 0x0) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec15\x00', 0x100, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x1, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', "00020600", "008b8c00", ["e5a494b8cbb68a9bc6cc2a9f", "f8ffffffffffffff00000001", "b06f8ca10c66eebcbd6f17c8", "5fe1de420000000000002a92"]}) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) socket(0xa, 0x3, 0x3b) 18.865222632s ago: executing program 4 (id=1361): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) fanotify_init$auto(0x602, 0x1) open(0x0, 0x662c2, 0xe1d2b27bdc14aa0c) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x6, 0x3, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4\x05\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r1, 0x5111, 0x0) 18.05908996s ago: executing program 4 (id=1365): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="a396d4000000000000aa0000000000000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf251200000008000800bb0000000800070001000000"], 0x24}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb6f227}, 0x800) msgctl$auto_IPC_INFO(0x45, 0x3, &(0x7f0000000200)={{0xff, 0xee00, 0xee00, 0x7fff, 0xb61, 0xa, 0xe17}, &(0x7f0000000180)=0xbf, &(0x7f00000001c0)=0x1, 0x4, 0x8000000000000001, 0x8000000000000001, 0x3, 0x10, 0x7, 0x7ff, 0x7, @raw=0x55c, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x4010) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c3, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x100000001, 0xeb1, r3, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x16b802, 0x0) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb3, 0x401, 0x8000) unshare$auto(0x3ff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x6) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram9/make-it-fail\x00', 0x2002, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 17.234327309s ago: executing program 4 (id=1366): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) (async) r1 = socket(0x10, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x6, 0x4008) (async) write$auto(r0, 0x0, 0xfffffdf1) (async) utimes$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x3}) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) 10.668243697s ago: executing program 1 (id=1380): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) fcntl$auto_F_OFD_GETLK(0xffffffffffffffff, 0x24, 0x9) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) 8.001783521s ago: executing program 1 (id=1384): process_madvise$auto_MADV_UNMERGEABLE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)="34750c8a520e38f8ccb7cfde67cfeb2ccf8ddccf6b263c97263eb0f1c43bee4a7529ef7791a46b3caf2f5e1201f03431b199aeec49906443d5db0eb0348e4c8c1b2cfca87178eb0046a0a6f43b3de2070dfc600cbfa68457321b5c761babde2701b376bde4ba3050993afcc7f77a0a862c80a9", 0x9}, 0x101, 0xd, 0x7fffffff) poll$auto(&(0x7f00000000c0)={0xffffffffffffffff, 0x9, 0x5}, 0x2, 0x0) ioctl$auto_BLKIOOPT(r0, 0x1279, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x200, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r1, &(0x7f0000000140)=""/142, 0x8e) r2 = socketpair$auto(0x8, 0x1, 0x5b, &(0x7f0000000200)=0x3) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/amidi2\x00', 0x1c800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) bind$auto(r2, &(0x7f0000000300)=@xdp={0x2c, 0x1, r4, 0x10}, 0x80) r5 = ioctl$auto_NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f0000000340)={r5, 0x7}) process_madvise$auto_MADV_UNMERGEABLE(r6, &(0x7f00000003c0)={&(0x7f0000000380)="da61b2dfacdc7bc5c21a9c0e8f82c6d21a75219117", 0x8}, 0x9, 0xd, 0x4) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000400)={"4139f5696c81b680a256b0ecf7e7ee5d64ce37d9dd215228cd1c3ca15d0f8101", 0x2, 0x75, 0x9, 0x100000000, 0xa, 0xffffffffffffffff}) process_vm_readv$auto(r7, &(0x7f00000004c0)={&(0x7f0000000480)="7870298c73957d880f637a9606c0d1a039b15e0bad4866b147a945210b20ff13cb5c8566f0f0e81b509966cbbe05a3900ef6fb8774", 0x1}, 0x0, &(0x7f0000000580)={&(0x7f0000000500)="dcd899f23b574433334cffa6cdebdcd1ac1735950eaa9e29ad08872527b0e8d2ca7a2407871b0ee788d9866e3ebcf983c286f510f7c9ecccabf5eda14f67e225b89eebc89056242924d54b434f43cb36a9a1a2832dd359ee52e052874f1429d4065b3996b181440dbee7ee2933b25bf39aa888a5a820", 0xe00000000000}, 0x9, 0x4) mmap$auto(0xd, 0x9, 0x7, 0x15, r0, 0x8) process_madvise$auto_MADV_POPULATE_READ(r6, &(0x7f0000000600)={&(0x7f00000005c0)="111cc614f93c", 0x1}, 0x2, 0x16, 0xcbf) r8 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000680), r6) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r8, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x800) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) r9 = getuid() rt_sigtimedwait$auto(&(0x7f00000007c0)={0x2}, &(0x7f0000000800)={@siginfo_0_0={0xe, 0xb, 0x0, @_sigchld={r7, r9, 0x7f2c, 0x8001}}}, &(0x7f0000000880)={0x5}, 0x8) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000008c0), 0x422800, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r2, 0x8, 0x5, 0x3) fcntl$getown(r0, 0x9) r12 = accept4$auto(r3, &(0x7f0000000900)=@l2={0x1f, 0x6, @any, 0x1, 0x3}, &(0x7f0000000940)=0x87, 0x81) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r12, 0x810c5701, &(0x7f0000000980)={0x7, 0x8, 0x0, 0x8, 0x2, "e211453f5b4566754b8ddc130c9d8d2b2148dcbdbd9e17a752b40e40faaa12f31fec5772e92da91cb4b0aab5587586779a1c4c6c536e23d16b323ff3edcca52b", "6a69a8bf539add2b09507918e35de87acde19c77879834e391a8296fcc584ab1c6e6ccdb26b3c401e9f599a530e52f6bb2c153800412755ed6b2711620b2dde4ac1f68a6688ebc0565cc3c61742f3dd2", "8aedce5c22ec2d8ece8f4585b6166e6876b6c3c3815da13df244a82d7888a417", 0x10, 0x4, 0x3, "84b0d244b94533978020adb73445245b3992cf0a6ca7160773771e60a4e8be3d847e1d652e3fc8dd8f8d26f68bba279b5ffe4122a28503cd9f329ce2"}) r13 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b40)={0x2a8, r13, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x5}, @NFC_ATTR_DEVICE_NAME={0xd, 0x2, '-[-}*\'-//'}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x9}, @NFC_ATTR_LLC_SDP={0x26c, 0x13, 0x0, 0x1, [@nested={0x30, 0x4e, 0x0, 0x1, [@typed={0x2b, 0xbb, 0x0, 0x0, @binary="2f274f66419a00eca1052721e1afe1aa04eafde7ce1c43e68fee160ffd1b031a92891c5ce5bd9d"}]}, @generic="dbf841f8a0266c2d2b4bd09168819d06641c0ccae1d50d21b4098322eb35320fac6b1ca09c2fa9f7f4d832d16b4ccebabd0767c8d406a7fd5da9b1e0d3ea32af366578a6bafea17b7a79ebcdd71a47fe02cc4c1d484b45a2abf7a9fa962a4d98eb70dc2c9f829ab1ea3c908e0fea9fa65e94f2a318cbf9a82f73f8390b357e7870776307aca810d1c7a4c4049535e323752b551ff503bcd5a5a851591ab78090706394af923fcd507b2329bce1d364cc3f58d24d70e567b7b1e82920ca0f78c643ed73c3fb4264d56324a303bc1ab7b5f4657eaf36115c8f", @typed={0x9f, 0x10b, 0x0, 0x0, @binary="d3940823bd0d376614ce7c87d6629b8f5138c5033929cb41184d941bfdef71972ac75914fc7fa94e3f65cc86a43342f3be86f34754df10d27a5d1b4337494b777da2288e25c77ee1f99ea648305f49014cbc984f608295383637882f2eed44394cce0131ea2b06d3cc0178003f7bea2fbd286618313d3c6c2b78583942abf9c4a6ed63857f3f4cbce3b8deed9975637f07c7daf2359b0ed547541e"}, @nested={0xbe, 0x2d, 0x0, 0x1, [@generic="b24c85ebe795c4ac94664e5645c12a32d4fdc1b303524baab02b5735a3e973fc9fba4d30a3ff7790ab42c8f27416049a52559c4b7961238d8105397ad83a9b77218f20ddd08664f281219cb67e87cff03e2bf0c6e493f479355e6bde986109d1b3f5652fd225e1cf5b794f58325d103df6c3f148de9225b1a274629f7ddfcd1c51656046e42cf65de7832b04f1fbc95be1651218fcf76a22a3e0dad309125b0f03854a6b86af", @nested={0x4, 0x11}, @typed={0x8, 0x15a, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x105, 0x0, 0x0, @fd=r3}]}]}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xf9de}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x840}, 0x4c000) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002580)={&(0x7f0000000fc0)={0x1598, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x2e, 0x0, "35ad731145d1f69aff9741d7320d0352e9407b831c04d461a11c1b0389f8350a03132ff27bc0514365c8"}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @fd}, @typed={0x4, 0xfb}]}, @TIPC_NLA_NET={0x1544, 0x7, 0x0, 0x1, [@nested={0x1275, 0xb5, 0x0, 0x1, [@generic="f37dc34233df0de45bd6985ef8eba2b763bb47001f515fa1a4b2aa453dc982c894e4b1b0467705676e1766daa2fed5934b792965411e04ad3e119db415ab86c4c788fb75d1179c9a81387c36d11c218cd766d31d92c814584b7b0d70203373e7f5d9dddc0cf6f176b8f81d7b85e72d0683c77351a82f01a5b6f1029514a56f67ae39248d40a7fca2ee1b7b9f7309c83b126263669e6a89868991383e0f7cac3eb9841052d5fd856415cb6cb4f57ad41e9ba95b5e7365d777e5f60f025d3e0a8b2562dae911ef", @typed={0x8, 0xfd, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="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", @generic="b7f549c529a2fe8696ea90fcf6dab36915f09756dd5f5b01195acdab261cfe1092e8cc1826ac2315094899551d7fcda55fac67275f3851f2125966a034c59c83973f505fe2cb0ab88639be464e8fd3de3454d0296a889c107d6703a83e6af120bc6e420f98a47233e67a2d3c1836ada513485fac2a14de22bdcaf311b7d4aa25f6f9f2313f95dc828845f3489dd94024a7c7", @typed={0x8, 0x84, 0x0, 0x0, @pid=r10}, @nested={0x4, 0xf8}, @generic="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"]}, @nested={0x2bb, 0x100, 0x0, 0x1, [@generic="f3b8e4cc91be76be24e432c66a5d0bea057b5f87ec5a1b6c50a81502e16be55d5664fcb11936ab9a5dbfaed682f85b9a6f7697d253cdeb6ac5b6cb5fc6279fe88939323ddde76a769df10f843727eac30d3059fd269a5b16e4b871cd71f74875d05321460376b22cb2679f9f5788dabe8359d49bfddbcaf5f2494c0608e015", @generic="3e128ba1563dd3cbcf265b7e9b3d80ac9e812674a03d53d66eb9a57fd6f19f24ad9882f5ee531ec35e679edb0322fdb41974b9870a4d4fcb23b060384ab4b53d2360ebbaa762a3590863e71f5cd05702789399162d41665062", @nested={0x4, 0x132}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r11}, @nested={0x4, 0x11}, @nested={0x4, 0x150}, @generic="83f59ca2ea77b66304792509fa7078ef5997408a2c1a8f4d3c011aa984c6863614eee4f05e998c42a15c02beeacdb1258b9f1fd910e177545605ec4e1c638d744aa1f0ff021671a3e93e723a865232229a205a925a13dcb7da90f8815fb3c46aefb0c12fb3e9e373dc5a027e13fc755b76d48c09176a7778bc63768e3efb2cb653e3f8efaa7bb87d63cf33510937fc0403d135fd80a56a527eb4898fd82f5207aab8c486ea4652a7ae6fa3f00f8df3c378080b0cf1cea8a6e56676022c8244447ec48f78", @nested={0x4, 0x12f}, @generic="4731a4cc1383e6272387f94aa0526080f557e16190ab0b8e922600d8958769440e3e233aad34241c5dab086c202cd6b6d6a89fd3546ac8e3e341e9d448a6d651d62eb0a91e6a1f1d572901f2a3c2497faf2b1e288641573b32d1aef3e83f414fd994965b5a2a6906bb2067e748a0fa3ae204f79d2f6bf6480feab9dfdad94b992ed3b76960225ca8649dfa27e06d9e7243355c74c5f9390d3f8caa9b965f5fc8af5f97b2ac447de252f1d5d1e1e7df202d9feccf3f095f01f596b36b2565a35344f37c27d2667b8b94283078a49212e9bc42036f78eddf23d2d5d0934ee27eb9125764de7320112b07443fedeb58e9", @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0xc, 0xe1, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}, 0x1598}, 0x1, 0x0, 0x0, 0x20004014}, 0x80) 6.808773646s ago: executing program 1 (id=1388): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x40044011) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/fo\"mat\x00') io_uring_setup$auto(0x20009, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D3\x00', 0x250cc0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100001, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x5, 0x2}) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mlockall$auto(0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) fanotify_init$auto(0x200602, 0x1) open(0x0, 0x662c2, 0xe1d2b27bdc14aa0c) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xf7eb}, 0x1, 0x0, 0x5, 0x7}, 0x7}, 0xffffffff, 0xb00) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b68, 0x1) 6.186785379s ago: executing program 9 (id=1389): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x3) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x7, 0x3) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) r1 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x420200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_u32_array_fops_file(0xffffffffffffff9c, 0x0, 0x28a800, 0x0) close_range$auto(0xffffffffffffffff, r2, 0xd) socket$nl_generic(0x10, 0x3, 0x10) semget$auto(0x9, 0x0, 0xf) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x45, 0x0) r3 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) r4 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x80, 0x0) ioctl$auto_FS_IOC_GETFSLABEL2(r4, 0x81009431, &(0x7f0000000200)="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") writev$auto(r3, &(0x7f0000001900)={0x0, 0x100000000}, 0x8) pwritev$auto(0x3, 0x0, 0x1000000005, 0x3, 0x9) read$auto(0xffffffffffffffff, 0x0, 0x9) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x2c4341, 0x0) bpf$auto(0x7f, &(0x7f00000000c0)=@iter_create={r5, 0xbfd}, 0x1) ioctl$auto_BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1eb642, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) connect$auto(r1, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x52) 5.98969721s ago: executing program 9 (id=1390): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x1, 0x0) fcntl$auto(0x3, 0x4, 0x0) r0 = socket(0x9, 0x1, 0x84) setsockopt$auto(r0, 0x84, 0x13, &(0x7f0000000240)='$\x03l\x004\xdaB\xd9\xa3\xe3\x89\xdc\xe7\xcaqOp7\x1f\xa0\b\x7f\ay\xfc\x99@T)\xd9\xb4\x133\x82+\x1a\xdaY\xd6l\xb2\x02\x19\xbfR\x99\x8e8\xc0-\xb8\x9ap[\xd0~\xf4\xc0\xe4(cR\au\xeb?)\xae\xe1\x14=#:^\xc5\x00/\xee\x1c\xf9\t\"\xf4\xbd\x14\xba\xc4\x9a\xf6\xfc\xa3?\xa2Q\xb9Q\x8e\x06D\xc2\xb1\xf6\xdb\xc3b/\xab\x8d?A\xe1\xca<\xf1\xf7\xf5\xae!\x1b19\xc8a9\xba\xe8ru7\xf9\xd4U\vX$\xd6\x14O\xfe\xf5$E\xcb\xc4l\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout\x00', 0x8242, 0x0) write$auto(r1, &(0x7f0000000180)='Q=E+?k\x93\xe7\xef\x97s\xe6\x13\x11', 0x5) r2 = socket(0xa, 0x3, 0x4) getsockopt$auto(r2, 0xff, 0x7, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff2, 0x456, 0x0, 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x401, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xca041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) accept4$auto(0xffffffffffffffff, &(0x7f0000000000)=@ax25={0x3, @default, 0x5}, 0x0, 0x243) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) 5.491979527s ago: executing program 9 (id=1391): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_GET_TXSC(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='{o'], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8002) ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8) mmap$auto(0x2, 0x3, 0x4, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(0x0, r3) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, 0x0, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r3, 0x8, 0x28, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x252403, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x1) madvise$auto(0x0, 0x2003f2, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r5) r6 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="f49a6cac", @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000005380)='/sys/kernel/debug/ieee80211/phy1/hwsim/dfs_simulate_radar\x00', 0x0, 0x0) madvise$auto_MADV_NORMAL(0x9304, 0x7ff, 0x0) 4.415782638s ago: executing program 1 (id=1393): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) fanotify_init$auto(0x602, 0x1) open(0x0, 0x662c2, 0xe1d2b27bdc14aa0c) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x6, 0x3, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4\x05\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r1, 0x5111, 0x0) 3.099880153s ago: executing program 8 (id=1394): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000200), 0x181600, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r0, 0x4004550d, &(0x7f00000000c0)=0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r1, &(0x7f0000000380)='1Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0x4) mmap$auto(0x0, 0x6, 0x1000, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0x2505}, 0x7fe}, 0x4, 0x1000) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES64=r1, @ANYRESOCT=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r5, 0x84, 0x22, 0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x80000, 0x0) r6 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(0x3, 0x4606, r6) socket(0xa, 0x2, 0x77) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x100000003, 0xeb1, r2, 0xbf47) madvise$auto(0x6, 0x0, 0x100017) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/statistics/tx_aborted_errors\x00', 0x1ab380, 0x0) write$auto(r7, &(0x7f0000000300)='9\x00;T\x16\b\x06\x00\x00\x00\xd6\xe4mh|\xea\xa6v4\a?\x88+t\xc5L&FxW#\x8a<[t\x9f{\xb48q0c\x11\xf8X\x0ee\x81\xa0\xbe\xb2#-\x89m\x8a\xb1\xcd\xf1\xfd\x05WC\x9f\xbe]\xf4\xce\xb3\xdd$A\xd6\x99\xd5+I\x18(\xe8\xd3\xc1\xb2)\xf8\xf6\xf5o\x13\xcd\xa7\xe3\x87\x01\xab\xe1\rh\x8d\xbe0J\x1f0Si\xb2\x8b#xG\x80\x11d\xf0\xf3\x9d7\xc8ajQ\x10\a\xe36\xa6', 0xc) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x16b802, 0x0) mmap$auto(0x0, 0x4020005, 0x5, 0xeb3, 0x401, 0x8000) 2.810584978s ago: executing program 9 (id=1395): r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r2, &(0x7f0000000640)='/sys/devices/virtual/bdi/43:352/stric\x06_limit\x00', 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) bind$auto(0x3, &(0x7f0000000240)=@l2={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x9fee651b8ed19f54}, 0x6a) r3 = socket(0xa, 0x1, 0x6) bind$auto(r3, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x1b) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) unshare$auto(0x40000080) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r4, &(0x7f0000000680)={0x0, 0x40200}, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) read$auto(0xffffffffffffffff, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) 2.305675541s ago: executing program 1 (id=1396): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) r0 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14fffff0", @ANYRES16=r0, @ANYBLOB='{o'], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000005380)='/sys/kernel/debug/ieee80211/phy1/hwsim/dfs_simulate_radar\x00', 0x0, 0x0) madvise$auto_MADV_NORMAL(0x9304, 0x7ff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) eventfd$auto(0x7) statmount$auto(0x0, 0x0, 0x1fe, 0x1) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) 1.457734936s ago: executing program 8 (id=1397): r0 = socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0x181f82, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000c80060009800100010012000100898771181f6fc5308db43c2120e19014e2e497f1c19f17790485908286dd000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000340)=0x3) ioctl$auto(r5, 0x1, r6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f0000000100)={0x3, 0x7f}, 0x0, 0x8) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x80000, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/019/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_DISCARDURB(r7, 0x550b, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xcb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40040) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0xd0d6000, 0xb, 0x6) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60f8bcff", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYRES32=r4, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/conf/bond0/force_igmp_version\x00', 0x242, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x49288d8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x120, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_MAC_MASK={0xfa, 0xd7, "f2b3cda0714e6c01cc2aff4fcbdb9bc4460a98d072440dc65248e021963ebe0353184b428f000152b3784f2fdb75b6b0a9fbcfd2605404980c3ef2a7b22d9fa00536355e0f0b27fe0bcf95899296d641e0a90d9a56d1ad3780cdfae430b9a68203e6d9fa28f93efabfff83a7503d6e9e0d71896ac4b70cfb19be0743f3ff71825273cdfe4db76628ce65859d2fd866244f97a7c6c88833521943106836f8b2360f04c66123d621be1d0c6c8d7a561b7e45a0c5f28714c02605d4022efcfb19fa9d8fb5db8c83b8ab63d9b9ec9b43cea253c8b6683d441f68ebec9f731f6efc4333cc63d8b46260b3b20ff0fbd17da243facc7214b413"}]}, 0x120}, 0x1, 0x0, 0x0, 0x24000804}, 0x8001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.436007015s ago: executing program 39 (id=1366): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) (async) r1 = socket(0x10, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x6, 0x4008) (async) write$auto(r0, 0x0, 0xfffffdf1) (async) utimes$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x3}) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1.154128099s ago: executing program 9 (id=1399): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x10000]}, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000000)=@batch={0xc000000000000000, 0x8, 0x2, 0x2, 0xe, 0xffffffffffffffff, 0x1, 0xa37c}, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x20280, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.078623935s ago: executing program 1 (id=1400): r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r2, &(0x7f0000000640)='/sys/devices/virtual/bdi/43:352/stric\x06_limit\x00', 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) bind$auto(0x3, &(0x7f0000000240)=@l2={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x9fee651b8ed19f54}, 0x6a) r3 = socket(0xa, 0x1, 0x6) bind$auto(r3, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x1b) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) unshare$auto(0x40000080) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r4, &(0x7f0000000680)={0x0, 0x40200}, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) read$auto(0xffffffffffffffff, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) 1.070516963s ago: executing program 8 (id=1401): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$auto_VHOST_SET_VRING_ENDIAN2(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x5, 0xfffffffe}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BLA_CRC={0x6, 0x22, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004014}, 0x140000e4) 748.052055ms ago: executing program 8 (id=1402): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x105000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto_PR_SET_MDWE(0x41, 0x6, 0x4, 0x154c, 0x7) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r1, 0x5605, 0xffffffffffffffff) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x200) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) modify_ldt$auto(0x4, 0x0, 0x5) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 295.150554ms ago: executing program 8 (id=1403): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x2000000000eb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x10106, 0x5, 0x15, 0x87) (async) r0 = semctl$auto(0x10106, 0x5, 0x15, 0x87) socket(0x2b, 0x1, 0x1) r1 = socket(0x27, 0xa, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_fd, 0x400000000003}, 0x4) (async) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd=0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_fd=0xffffffffffffffff, 0x400000000003}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x2004, 0x8) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x2004, 0x8) move_pages$auto(r0, 0x80000000, 0x0, 0x0, 0x0, 0x7fff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4801c}, 0x24000810) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r5 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2b, 0x80000, 0xb) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) prctl$auto(0x1000000003b, 0x2000000000001, 0x4, 0x5, 0x7) r7 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x1181, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r6, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r6, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto_SO_RCVTIMEO_NEW(r7, 0xfffffff7, 0x42, &(0x7f0000000000)='\x14.-\x00', 0x8) (async) setsockopt$auto_SO_RCVTIMEO_NEW(r7, 0xfffffff7, 0x42, &(0x7f0000000000)='\x14.-\x00', 0x8) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x2c4842, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x3, 0x0, 0x0, 0xfffffffffffffffe) 103.609053ms ago: executing program 9 (id=1404): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x10000]}, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000000)=@batch={0xc000000000000000, 0x8, 0x2, 0x2, 0xe, 0xffffffffffffffff, 0x1, 0xa37c}, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x20280, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x80, &(0x7f0000000180)={0x0, 0xb, 0x40, @raw=0xd}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 8 (id=1405): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4000000000002) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0x7, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x4, 0x7, 0xe5, 0x3, 0xffffffffffffffff}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000000008000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r2, 0x2ffffffffffe) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x44) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(r1, 0x0, 0x1a6, 0x4) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, 0x0, 0x401) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio31\x00', 0x169000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) r4 = bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x4, 0x9, 0x80100, 0xffffffffffffffff, 0x2, 0x9}, 0x4) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000280), 0x301040, 0x0) (async) r5 = socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x3f, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0xffffffffffffffff, 0x89f1, 0x24) (async) ioctl$auto(r3, 0xc0205648, r3) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) kernel console output (not intermixed with test programs): in process `syz.3.945'. [ 313.311618][T10140] overlayfs: "check_copy_up" module option is obsolete [ 313.835146][T10154] random: crng reseeded on system resumption [ 314.345886][T10150] hub 1-0:1.0: USB hub found [ 314.379885][T10150] hub 1-0:1.0: 1 port detected [ 314.750098][T10177] FAULT_INJECTION: forcing a failure. [ 314.750098][T10177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.806641][T10177] CPU: 1 UID: 0 PID: 10177 Comm: syz.4.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.806684][T10177] Tainted: [L]=SOFTLOCKUP [ 314.806693][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.806712][T10177] Call Trace: [ 314.806720][T10177] [ 314.806730][T10177] dump_stack_lvl+0x100/0x190 [ 314.806763][T10177] should_fail_ex.cold+0x5/0xa [ 314.806800][T10177] _copy_to_user+0x32/0xd0 [ 314.806830][T10177] rng_dev_read+0x223/0x910 [ 314.806859][T10177] ? __pfx_virtio_read+0x10/0x10 [ 314.806891][T10177] ? __pfx_rng_dev_read+0x10/0x10 [ 314.806926][T10177] ? bpf_lsm_file_permission+0x9/0x10 [ 314.806953][T10177] ? security_file_permission+0x76/0x210 [ 314.806986][T10177] ? rw_verify_area+0xce/0x6d0 [ 314.807014][T10177] ? __pfx_rng_dev_read+0x10/0x10 [ 314.807049][T10177] vfs_read+0x1e4/0xb30 [ 314.807082][T10177] ? __pfx_vfs_read+0x10/0x10 [ 314.807110][T10177] ? find_held_lock+0x2b/0x80 [ 314.807144][T10177] ? __fget_files+0x215/0x3d0 [ 314.807174][T10177] ? __fget_files+0x215/0x3d0 [ 314.807211][T10177] ? __fget_files+0x21f/0x3d0 [ 314.807251][T10177] ksys_read+0x12a/0x250 [ 314.807281][T10177] ? __pfx_ksys_read+0x10/0x10 [ 314.807314][T10177] ? rcu_is_watching+0x12/0xc0 [ 314.807350][T10177] do_syscall_64+0x10b/0xf80 [ 314.807388][T10177] ? clear_bhb_loop+0x40/0x90 [ 314.807420][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.807449][T10177] RIP: 0033:0x7f8666b9ce59 [ 314.807471][T10177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.807497][T10177] RSP: 002b:00007f866799b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.807527][T10177] RAX: ffffffffffffffda RBX: 00007f8666e15fa0 RCX: 00007f8666b9ce59 [ 314.807545][T10177] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 000000000000000e [ 314.807562][T10177] RBP: 00007f8666c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.807579][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.807595][T10177] R13: 00007f8666e16038 R14: 00007f8666e15fa0 R15: 00007ffcf2652aa8 [ 314.807630][T10177] [ 316.063530][T10208] FAULT_INJECTION: forcing a failure. [ 316.063530][T10208] name failslab, interval 1, probability 0, space 0, times 0 [ 316.076422][T10208] CPU: 0 UID: 0 PID: 10208 Comm: syz.4.955 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.076471][T10208] Tainted: [L]=SOFTLOCKUP [ 316.076482][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.076498][T10208] Call Trace: [ 316.076508][T10208] [ 316.076518][T10208] dump_stack_lvl+0x100/0x190 [ 316.076571][T10208] should_fail_ex.cold+0x5/0xa [ 316.076626][T10208] should_failslab+0xc2/0x120 [ 316.076661][T10208] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 316.076707][T10208] ? alloc_inode+0x183/0x250 [ 316.076749][T10208] ? do_futex+0x192/0x350 [ 316.076785][T10208] alloc_inode+0x183/0x250 [ 316.076827][T10208] create_pipe_files+0x4c/0x970 [ 316.076867][T10208] do_pipe2+0xbd/0x1e0 [ 316.076902][T10208] ? __pfx_do_pipe2+0x10/0x10 [ 316.076934][T10208] ? xfd_validate_state+0x129/0x190 [ 316.076976][T10208] __x64_sys_pipe+0x33/0x50 [ 316.077012][T10208] do_syscall_64+0x10b/0xf80 [ 316.077058][T10208] ? clear_bhb_loop+0x40/0x90 [ 316.077094][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.077122][T10208] RIP: 0033:0x7f8666b9ce59 [ 316.077146][T10208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.077173][T10208] RSP: 002b:00007f866799b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 316.077201][T10208] RAX: ffffffffffffffda RBX: 00007f8666e15fa0 RCX: 00007f8666b9ce59 [ 316.077219][T10208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.077237][T10208] RBP: 00007f8666c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 316.077253][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.077267][T10208] R13: 00007f8666e16038 R14: 00007f8666e15fa0 R15: 00007ffcf2652aa8 [ 316.077300][T10208] [ 316.737318][T10219] usb usb3: usbfs: process 10219 (syz.4.957) did not claim interface 0 before use [ 317.201356][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.209387][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.769613][T10227] futex_wake_op: syz.4.961 tries to shift op by -2048; fix this program [ 317.837887][T10227] usb usb26: usbfs: process 10227 (syz.4.961) did not claim interface 0 before use [ 318.528297][T10247] vivid-008: ================= START STATUS ================= [ 318.536666][T10247] vivid-008: ================== END STATUS ================== [ 319.168394][T10260] FAULT_INJECTION: forcing a failure. [ 319.168394][T10260] name failslab, interval 1, probability 0, space 0, times 0 [ 319.249114][T10260] CPU: 1 UID: 0 PID: 10260 Comm: syz.4.970 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.249160][T10260] Tainted: [L]=SOFTLOCKUP [ 319.249169][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.249185][T10260] Call Trace: [ 319.249194][T10260] [ 319.249205][T10260] dump_stack_lvl+0x100/0x190 [ 319.249241][T10260] should_fail_ex.cold+0x5/0xa [ 319.249276][T10260] ? tomoyo_realpath_from_path+0xb6/0x690 [ 319.249312][T10260] should_failslab+0xc2/0x120 [ 319.249344][T10260] __kmalloc_noprof+0xe0/0x850 [ 319.249369][T10260] ? kfree+0x1dd/0x6c0 [ 319.249411][T10260] tomoyo_realpath_from_path+0xb6/0x690 [ 319.249456][T10260] tomoyo_path_number_perm+0x23c/0x580 [ 319.249484][T10260] ? tomoyo_path_number_perm+0x22e/0x580 [ 319.249514][T10260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.249579][T10260] ? find_held_lock+0x2b/0x80 [ 319.249613][T10260] ? __fget_files+0x215/0x3d0 [ 319.249642][T10260] ? hook_file_ioctl_common+0x149/0x410 [ 319.249669][T10260] ? __fget_files+0x215/0x3d0 [ 319.249704][T10260] ? __fget_files+0x21f/0x3d0 [ 319.249738][T10260] security_file_ioctl+0xd3/0x230 [ 319.249768][T10260] __x64_sys_ioctl+0xb7/0x210 [ 319.249797][T10260] do_syscall_64+0x10b/0xf80 [ 319.249832][T10260] ? clear_bhb_loop+0x40/0x90 [ 319.249863][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.249890][T10260] RIP: 0033:0x7f8666b9ce59 [ 319.249910][T10260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.249935][T10260] RSP: 002b:00007f866797a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.249959][T10260] RAX: ffffffffffffffda RBX: 00007f8666e16090 RCX: 00007f8666b9ce59 [ 319.249977][T10260] RDX: 000000000000007f RSI: 000000000000541b RDI: 0000000000000003 [ 319.249992][T10260] RBP: 00007f866797a090 R08: 0000000000000000 R09: 0000000000000000 [ 319.250008][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.250023][T10260] R13: 00007f8666e16128 R14: 00007f8666e16090 R15: 00007ffcf2652aa8 [ 319.250064][T10260] [ 319.254828][T10260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.836855][T10265] netlink: 'syz.4.971': attribute type 11 has an invalid length. [ 321.792057][T10309] FAULT_INJECTION: forcing a failure. [ 321.792057][T10309] name failslab, interval 1, probability 0, space 0, times 0 [ 321.921188][T10309] CPU: 1 UID: 0 PID: 10309 Comm: syz.2.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.921228][T10309] Tainted: [L]=SOFTLOCKUP [ 321.921236][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.921250][T10309] Call Trace: [ 321.921257][T10309] [ 321.921266][T10309] dump_stack_lvl+0x100/0x190 [ 321.921310][T10309] should_fail_ex.cold+0x5/0xa [ 321.921342][T10309] ? tomoyo_encode2+0xfb/0x3c0 [ 321.921374][T10309] should_failslab+0xc2/0x120 [ 321.921405][T10309] __kmalloc_noprof+0xe0/0x850 [ 321.921437][T10309] tomoyo_encode2+0xfb/0x3c0 [ 321.921475][T10309] tomoyo_encode+0x29/0x50 [ 321.921504][T10309] tomoyo_realpath_from_path+0x18c/0x690 [ 321.921542][T10309] tomoyo_path_number_perm+0x23c/0x580 [ 321.921568][T10309] ? tomoyo_path_number_perm+0x22e/0x580 [ 321.921600][T10309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.921667][T10309] ? find_held_lock+0x2b/0x80 [ 321.921702][T10309] ? __fget_files+0x215/0x3d0 [ 321.921733][T10309] ? hook_file_ioctl_common+0x149/0x410 [ 321.921762][T10309] ? __fget_files+0x215/0x3d0 [ 321.921800][T10309] ? __fget_files+0x21f/0x3d0 [ 321.921833][T10309] security_file_ioctl+0xd3/0x230 [ 321.921871][T10309] __x64_sys_ioctl+0xb7/0x210 [ 321.921902][T10309] do_syscall_64+0x10b/0xf80 [ 321.921938][T10309] ? clear_bhb_loop+0x40/0x90 [ 321.921978][T10309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.922006][T10309] RIP: 0033:0x7f1821f9ce59 [ 321.922027][T10309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.922058][T10309] RSP: 002b:00007f1822f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.922084][T10309] RAX: ffffffffffffffda RBX: 00007f1822216090 RCX: 00007f1821f9ce59 [ 321.922102][T10309] RDX: 000000000000007f RSI: 000000000000541b RDI: 0000000000000003 [ 321.922118][T10309] RBP: 00007f1822f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.922135][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.922148][T10309] R13: 00007f1822216128 R14: 00007f1822216090 R15: 00007ffd8c303af8 [ 321.922175][T10309] [ 321.922208][T10309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.404891][T10307] Process accounting paused [ 322.597464][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 323.938315][T10341] bond0: invalid ARP target specified [ 324.037395][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'. [ 324.978227][ T8407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.999070][ T8407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.009383][ T8407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.027568][ T8407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.035898][ T8407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.173428][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 325.957815][T10376] ubi0: attaching mtd0 [ 325.995588][T10376] ubi0: scanning is finished [ 326.012570][T10376] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 326.259908][T10376] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 326.652481][T10350] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.683635][T10350] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.708415][T10350] bridge_slave_0: entered allmulticast mode [ 326.741784][T10350] bridge_slave_0: entered promiscuous mode [ 326.780878][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.830337][T10350] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.838439][T10350] bridge_slave_1: entered allmulticast mode [ 326.867711][T10350] bridge_slave_1: entered promiscuous mode [ 326.981068][T10350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.014828][T10350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.109979][ T8697] Bluetooth: hci5: command tx timeout [ 327.139558][T10350] team0: Port device team_slave_0 added [ 327.167163][T10350] team0: Port device team_slave_1 added [ 327.398657][T10350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.409399][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.452587][T10350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.557152][T10350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.571439][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.643160][T10350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.992171][T10420] FAULT_INJECTION: forcing a failure. [ 327.992171][T10420] name failslab, interval 1, probability 0, space 0, times 0 [ 328.033631][T10420] CPU: 1 UID: 0 PID: 10420 Comm: syz.3.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.033674][T10420] Tainted: [L]=SOFTLOCKUP [ 328.033683][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.033699][T10420] Call Trace: [ 328.033708][T10420] [ 328.033718][T10420] dump_stack_lvl+0x100/0x190 [ 328.033756][T10420] should_fail_ex.cold+0x5/0xa [ 328.033790][T10420] ? lsm_blob_alloc+0x68/0x90 [ 328.033825][T10420] should_failslab+0xc2/0x120 [ 328.033855][T10420] __kmalloc_noprof+0xe0/0x850 [ 328.033881][T10420] ? trace_kmalloc+0xe3/0x110 [ 328.033915][T10420] lsm_blob_alloc+0x68/0x90 [ 328.033950][T10420] security_sk_alloc+0x2d/0x290 [ 328.033991][T10420] sk_prot_alloc+0x12a/0x2a0 [ 328.034029][T10420] sk_alloc+0x36/0xe80 [ 328.034060][T10420] __netlink_create+0x5e/0x2c0 [ 328.034091][T10420] ? __wake_up+0x3f/0x60 [ 328.034131][T10420] netlink_create+0x29b/0x610 [ 328.034162][T10420] ? __pfx_rtnetlink_bind+0x10/0x10 [ 328.034193][T10420] __sock_create+0x339/0x860 [ 328.034242][T10420] __sys_socket+0x14d/0x260 [ 328.034281][T10420] ? __pfx___sys_socket+0x10/0x10 [ 328.034330][T10420] __x64_sys_socket+0x72/0xb0 [ 328.034369][T10420] ? lockdep_hardirqs_on+0x78/0x100 [ 328.034409][T10420] do_syscall_64+0x10b/0xf80 [ 328.034447][T10420] ? clear_bhb_loop+0x40/0x90 [ 328.034481][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.034510][T10420] RIP: 0033:0x7ffa2879ce59 [ 328.034532][T10420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.034558][T10420] RSP: 002b:00007ffa2957f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 328.034585][T10420] RAX: ffffffffffffffda RBX: 00007ffa28a16090 RCX: 00007ffa2879ce59 [ 328.034604][T10420] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 328.034620][T10420] RBP: 00007ffa28832d6f R08: 0000000000000000 R09: 0000000000000000 [ 328.034637][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.034655][T10420] R13: 00007ffa28a16128 R14: 00007ffa28a16090 R15: 00007fffff0732d8 [ 328.034692][T10420] [ 328.392423][T10350] hsr_slave_0: entered promiscuous mode [ 328.399114][T10350] hsr_slave_1: entered promiscuous mode [ 328.405898][T10350] debugfs: 'hsr0' already exists in 'hsr' [ 328.411692][T10350] Cannot create hsr debugfs directory [ 328.469823][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0ef5a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 328.485357][ C0] Call Trace: [ 328.488643][ C0] [ 328.491484][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 328.498170][ C0] ? sched_clock+0x38/0x60 [ 328.502586][ C0] ? sched_clock_cpu+0x6c/0x570 [ 328.507443][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 328.512728][ C0] mce_cpu_restart+0xd5/0x1f0 [ 328.517408][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 328.523584][ C0] __sysvec_call_function_single+0x83/0x440 [ 328.529493][ C0] sysvec_call_function_single+0x9e/0xc0 [ 328.535135][ C0] [ 328.538057][ C0] [ 328.540984][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 328.546965][ C0] RIP: 0010:__rcu_read_unlock+0x68/0x5e0 [ 328.552597][ C0] Code: 08 84 d2 0f 85 0a 02 00 00 83 ab c4 04 00 00 01 75 3b 48 8d bb c8 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 da [ 328.572214][ C0] RSP: 0018:ffffc90005b3f6e0 EFLAGS: 00000a06 [ 328.578297][ C0] RAX: dffffc0000000000 RBX: ffff888032279ec0 RCX: ffffc90005b3f6dc [ 328.586275][ C0] RDX: 1ffff1100644f471 RSI: ffffffff8def8417 RDI: ffff88803227a388 [ 328.594258][ C0] RBP: ffff88801c6ad000 R08: 0000000000000001 R09: 0000000000000000 [ 328.602229][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 328.610199][ C0] R13: ffff88801c6ad118 R14: 0000000000000000 R15: ffff88801c6ad118 [ 328.618195][ C0] kernfs_root+0xf8/0x2a0 [ 328.622539][ C0] kernfs_active+0xb6/0x110 [ 328.627046][ C0] kernfs_activate_one+0x99/0x290 [ 328.632080][ C0] kernfs_add_one+0x55e/0x850 [ 328.636792][ C0] __kernfs_create_file+0x295/0x350 [ 328.642008][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 328.647391][ C0] internal_create_group+0x593/0xf40 [ 328.652697][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 328.658515][ C0] ? kernfs_create_link+0x1bd/0x240 [ 328.663818][ C0] internal_create_groups+0x9d/0x150 [ 328.669113][ C0] device_add+0xf5b/0x1950 [ 328.673544][ C0] ? __pfx_device_add+0x10/0x10 [ 328.678408][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 328.683789][ C0] ? __init_waitqueue_head+0xca/0x150 [ 328.689175][ C0] netdev_register_kobject+0x1a9/0x3d0 [ 328.694652][ C0] register_netdevice+0x151c/0x24b0 [ 328.699868][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 328.705419][ C0] ? slip_open+0xb49/0x1120 [ 328.709930][ C0] ? kfree+0x1dd/0x6c0 [ 328.714008][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 328.719306][ C0] slip_open+0xb8a/0x1120 [ 328.723654][ C0] ? __pfx_slip_open+0x10/0x10 [ 328.728434][ C0] ? tty_set_ldisc+0x2b1/0x740 [ 328.733218][ C0] ? __pfx_slip_open+0x10/0x10 [ 328.737992][ C0] tty_ldisc_open+0xa2/0x120 [ 328.742592][ C0] tty_set_ldisc+0x325/0x740 [ 328.747194][ C0] tty_ioctl+0x695/0x1640 [ 328.751538][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 328.756323][ C0] ? find_held_lock+0x2b/0x80 [ 328.761007][ C0] ? __fget_files+0x215/0x3d0 [ 328.765692][ C0] ? hook_file_ioctl_common+0x149/0x410 [ 328.771247][ C0] ? __fget_files+0x21f/0x3d0 [ 328.775935][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 328.780711][ C0] __x64_sys_ioctl+0x18e/0x210 [ 328.785480][ C0] do_syscall_64+0x10b/0xf80 [ 328.790084][ C0] ? clear_bhb_loop+0x40/0x90 [ 328.794767][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.800662][ C0] RIP: 0033:0x7f8666b9ce59 [ 328.805080][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.824691][ C0] RSP: 002b:00007f866799b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.833106][ C0] RAX: ffffffffffffffda RBX: 00007f8666e15fa0 RCX: 00007f8666b9ce59 [ 328.841078][ C0] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000007 [ 328.849044][ C0] RBP: 00007f8666c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 328.857028][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.865010][ C0] R13: 00007f8666e16038 R14: 00007f8666e15fa0 R15: 00007ffcf2652aa8 [ 328.873010][ C0] [ 329.192662][ T8697] Bluetooth: hci5: command tx timeout [ 329.266853][T10440] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1010'. [ 329.704885][T10350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.724179][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.732464][T10350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.735065][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 329.765938][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.775579][T10350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.791083][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.799098][T10350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.813361][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.154800][T10350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.233737][T10350] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.316824][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.323982][ T9252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.456272][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.463419][ T9252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.511805][T10473] netlink: 62 bytes leftover after parsing attributes in process `syz.4.1017'. [ 331.282864][ T8697] Bluetooth: hci5: command tx timeout [ 331.774993][T10350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.052000][T10511] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 332.687957][T10350] veth0_vlan: entered promiscuous mode [ 332.737833][T10350] veth1_vlan: entered promiscuous mode [ 332.870488][T10350] veth0_macvtap: entered promiscuous mode [ 332.914999][T10350] veth1_macvtap: entered promiscuous mode [ 333.000156][T10350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.048260][T10350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.098598][ T9241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.131334][ T9241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.163286][ T9241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.195096][ T9241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.327393][ T9241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.353801][ T8697] Bluetooth: hci5: command tx timeout [ 333.381009][ T9241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.499500][ T9241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.508082][ T9241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.090147][T10541] futex_wake_op: syz.5.991 tries to shift op by -2048; fix this program [ 334.140090][T10541] usb usb26: usbfs: process 10541 (syz.5.991) did not claim interface 0 before use [ 334.172367][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 334.294938][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 334.328460][T10551] netlink: 28905 bytes leftover after parsing attributes in process `syz.4.1027'. [ 335.144198][T10562] netlink: 'syz.5.1033': attribute type 9 has an invalid length. [ 336.578480][T10600] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 337.254047][T10611] ubi0: attaching mtd0 [ 337.268671][T10611] ubi0: scanning is finished [ 337.286748][T10611] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 337.441529][T10611] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 337.724220][T10618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 337.735306][T10618] veth1_virt_wifi: entered promiscuous mode [ 337.741939][T10618] veth1_virt_wifi: entered allmulticast mode [ 350.283464][ T8407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.297571][ T8407] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.306806][ T8407] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.316229][ T8407] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.324128][ T8407] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.734382][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.741543][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.749045][T10627] bridge_slave_0: entered allmulticast mode [ 350.756037][T10627] bridge_slave_0: entered promiscuous mode [ 350.763790][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.770914][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.778285][T10627] bridge_slave_1: entered allmulticast mode [ 350.786016][T10627] bridge_slave_1: entered promiscuous mode [ 350.813469][T10627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.824631][T10627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.850653][T10627] team0: Port device team_slave_0 added [ 350.858163][T10627] team0: Port device team_slave_1 added [ 350.879970][T10627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.887109][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.913965][T10627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.926503][T10627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.933710][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.959683][T10627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.999482][T10627] hsr_slave_0: entered promiscuous mode [ 351.005688][T10627] hsr_slave_1: entered promiscuous mode [ 351.011647][T10627] debugfs: 'hsr0' already exists in 'hsr' [ 351.017846][T10627] Cannot create hsr debugfs directory [ 351.152577][T10627] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 351.162337][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.170075][T10627] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 351.179131][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.187435][T10627] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 351.207521][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.225889][T10627] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.246395][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.296360][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.303638][T10627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.311110][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.318314][T10627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.415513][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.440044][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.468857][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.534066][T10627] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.571735][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.578895][ T9252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.601617][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.608798][ T9252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.718349][T10662] FAULT_INJECTION: forcing a failure. [ 351.718349][T10662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.885654][T10662] CPU: 1 UID: 0 PID: 10662 Comm: syz.2.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.885703][T10662] Tainted: [L]=SOFTLOCKUP [ 351.885715][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.885732][T10662] Call Trace: [ 351.885741][T10662] [ 351.885753][T10662] dump_stack_lvl+0x100/0x190 [ 351.885791][T10662] should_fail_ex.cold+0x5/0xa [ 351.885823][T10662] ? prepare_alloc_pages+0x16d/0x5f0 [ 351.885864][T10662] should_fail_alloc_page+0xeb/0x140 [ 351.885902][T10662] prepare_alloc_pages+0x1f0/0x5f0 [ 351.885946][T10662] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 351.886004][T10662] ? __lock_acquire+0x4a5/0x2630 [ 351.886033][T10662] ? trace_mm_page_alloc+0x163/0x1d0 [ 351.886077][T10662] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.886135][T10662] ? lock_acquire+0x1b1/0x370 [ 351.886164][T10662] ? find_held_lock+0x2b/0x80 [ 351.886202][T10662] ? page_table_check_set+0x477/0x920 [ 351.886245][T10662] ? page_table_check_set+0x486/0x920 [ 351.886281][T10662] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.886325][T10662] ? policy_nodemask+0xed/0x4f0 [ 351.886362][T10662] alloc_pages_mpol+0x1fb/0x540 [ 351.886398][T10662] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 351.886432][T10662] ? filemap_map_pages+0x950/0x2140 [ 351.886459][T10662] ? filemap_map_pages+0x950/0x2140 [ 351.886491][T10662] folio_alloc_mpol_noprof+0x36/0x260 [ 351.886532][T10662] vma_alloc_folio_noprof+0xed/0x1d0 [ 351.886572][T10662] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 351.886609][T10662] ? rcu_read_unlock+0x2d/0xb0 [ 351.886651][T10662] ? rcu_read_unlock+0x2d/0xb0 [ 351.886702][T10662] do_wp_page+0x1ee1/0x4350 [ 351.886750][T10662] ? __pfx_do_wp_page+0x10/0x10 [ 351.886790][T10662] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.886835][T10662] __handle_mm_fault+0x1ab6/0x2a00 [ 351.886885][T10662] ? reacquire_held_locks+0xce/0x1e0 [ 351.886916][T10662] ? __pfx___handle_mm_fault+0x10/0x10 [ 351.886961][T10662] ? lock_vma_under_rcu+0x17c/0x590 [ 351.887029][T10662] handle_mm_fault+0x36d/0xa20 [ 351.887082][T10662] do_user_addr_fault+0x5a3/0x12f0 [ 351.887136][T10662] exc_page_fault+0x6f/0xd0 [ 351.887181][T10662] asm_exc_page_fault+0x26/0x30 [ 351.887211][T10662] RIP: 0033:0x7f1821f5cc45 [ 351.887234][T10662] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 351.887262][T10662] RSP: 002b:00007f1822eecde0 EFLAGS: 00010293 [ 351.887285][T10662] RAX: 0000000000000008 RBX: 00007f1822d47e20 RCX: 0000000000000000 [ 351.887302][T10662] RDX: 0000000000000000 RSI: 00007f182204ff57 RDI: 00007f1822d47e20 [ 351.887319][T10662] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 351.887335][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f182204fd4d [ 351.887353][T10662] R13: ffffffffffffffe8 R14: 0000000000000009 R15: 00007f182204ff57 [ 351.887388][T10662] [ 352.449821][ T8407] Bluetooth: hci6: command tx timeout [ 352.527544][ T8404] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.558797][ T8404] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.596723][ T8404] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.624241][ T8404] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.646299][ T8404] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.722417][T10680] Process accounting resumed [ 353.150165][T10627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.846426][T10690] zram0: detected capacity change from 0 to 16 [ 353.867652][T10627] veth0_vlan: entered promiscuous mode [ 353.901644][T10713] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1064'. [ 353.925273][T10627] veth1_vlan: entered promiscuous mode [ 354.019921][T10627] veth0_macvtap: entered promiscuous mode [ 354.061086][T10627] veth1_macvtap: entered promiscuous mode [ 354.099391][T10627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.205892][T10627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.299032][ T9241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.388057][ T9289] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.398941][ T9289] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.459615][ T9289] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.484104][ T8697] Bluetooth: hci6: command tx timeout [ 354.546262][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.562631][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.593149][T10673] bridge_slave_0: entered allmulticast mode [ 354.615179][T10673] bridge_slave_0: entered promiscuous mode [ 354.651329][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.661918][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.676947][T10673] bridge_slave_1: entered allmulticast mode [ 354.688529][T10673] bridge_slave_1: entered promiscuous mode [ 354.723803][ T8697] Bluetooth: hci7: command tx timeout [ 354.805374][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.853631][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.939823][T10734] FAULT_INJECTION: forcing a failure. [ 354.939823][T10734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.978715][T10673] team0: Port device team_slave_0 added [ 355.032144][T10673] team0: Port device team_slave_1 added [ 355.080443][ T8751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.104503][ T8751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.280238][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.2.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.280265][T10734] Tainted: [L]=SOFTLOCKUP [ 355.280270][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.280280][T10734] Call Trace: [ 355.280318][T10734] [ 355.280324][T10734] dump_stack_lvl+0x100/0x190 [ 355.280347][T10734] should_fail_ex.cold+0x5/0xa [ 355.280364][T10734] ? prepare_alloc_pages+0x16d/0x5f0 [ 355.280385][T10734] should_fail_alloc_page+0xeb/0x140 [ 355.280405][T10734] prepare_alloc_pages+0x1f0/0x5f0 [ 355.280427][T10734] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 355.280457][T10734] ? __lock_acquire+0x4a5/0x2630 [ 355.280471][T10734] ? trace_mm_page_alloc+0x163/0x1d0 [ 355.280498][T10734] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.280526][T10734] ? lock_acquire+0x1b1/0x370 [ 355.280548][T10734] ? page_table_check_set+0x486/0x920 [ 355.280567][T10734] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.280590][T10734] ? policy_nodemask+0xed/0x4f0 [ 355.280610][T10734] alloc_pages_mpol+0x1fb/0x540 [ 355.280628][T10734] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 355.280645][T10734] ? filemap_map_pages+0x950/0x2140 [ 355.280658][T10734] ? filemap_map_pages+0x950/0x2140 [ 355.280674][T10734] folio_alloc_mpol_noprof+0x36/0x260 [ 355.280695][T10734] vma_alloc_folio_noprof+0xed/0x1d0 [ 355.280715][T10734] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 355.280738][T10734] ? rcu_read_unlock+0x2d/0xb0 [ 355.280777][T10734] ? rcu_read_unlock+0x2d/0xb0 [ 355.280804][T10734] do_wp_page+0x1ee1/0x4350 [ 355.280829][T10734] ? __pfx_do_wp_page+0x10/0x10 [ 355.280849][T10734] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.280871][T10734] __handle_mm_fault+0x1ab6/0x2a00 [ 355.280897][T10734] ? reacquire_held_locks+0xce/0x1e0 [ 355.280912][T10734] ? __pfx___handle_mm_fault+0x10/0x10 [ 355.280936][T10734] ? lock_vma_under_rcu+0x17c/0x590 [ 355.280968][T10734] handle_mm_fault+0x36d/0xa20 [ 355.280999][T10734] do_user_addr_fault+0x5a3/0x12f0 [ 355.281024][T10734] exc_page_fault+0x6f/0xd0 [ 355.281119][T10734] asm_exc_page_fault+0x26/0x30 [ 355.281134][T10734] RIP: 0033:0x7f1821f5cc45 [ 355.281148][T10734] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 355.281163][T10734] RSP: 002b:00007f1822ecbde0 EFLAGS: 00010293 [ 355.281176][T10734] RAX: 0000000000000008 RBX: 00007f1822d47e20 RCX: 0000000000000000 [ 355.281186][T10734] RDX: 0000000000000000 RSI: 00007f182204ff57 RDI: 00007f1822d47e20 [ 355.281196][T10734] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 355.281205][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f182204fd4d [ 355.281214][T10734] R13: ffffffffffffffe8 R14: 0000000000000009 R15: 00007f182204ff57 [ 355.281233][T10734] [ 355.281373][T10734] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 355.594439][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.604615][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.697271][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.792651][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.819967][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.899367][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.959633][ T8751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.980645][ T8751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.023303][T10673] hsr_slave_0: entered promiscuous mode [ 356.036229][T10673] hsr_slave_1: entered promiscuous mode [ 356.045273][T10673] debugfs: 'hsr0' already exists in 'hsr' [ 356.054846][T10673] Cannot create hsr debugfs directory [ 356.565059][ T8697] Bluetooth: hci6: command tx timeout [ 356.804736][ T8697] Bluetooth: hci7: command tx timeout [ 356.961974][T10673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 356.993453][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.013479][T10673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 357.054494][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.079866][T10673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.123846][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.147569][T10673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 357.212333][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.526652][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.618773][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.678347][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.685578][ T9241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.779504][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.786795][ T9241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.646194][ T8697] Bluetooth: hci6: command tx timeout [ 358.886219][ T8697] Bluetooth: hci7: command tx timeout [ 359.339165][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.041828][T10673] veth0_vlan: entered promiscuous mode [ 360.080311][T10673] veth1_vlan: entered promiscuous mode [ 360.174616][T10673] veth0_macvtap: entered promiscuous mode [ 360.214089][T10673] veth1_macvtap: entered promiscuous mode [ 360.315665][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.358045][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.403315][ T9241] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.432672][ T9241] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.476888][ T9241] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.514668][ T9241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.864068][ T8751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.905676][ T8751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.967016][ T8697] Bluetooth: hci7: command tx timeout [ 361.019955][ T9252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.038299][ T9252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.789247][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1085'. [ 362.314859][T10867] bridge0: port 3(syz_tun) entered blocking state [ 362.346770][T10867] bridge0: port 3(syz_tun) entered disabled state [ 362.376986][T10867] syz_tun: entered allmulticast mode [ 362.396673][T10867] syz_tun: entered promiscuous mode [ 362.411137][T10867] bridge0: port 3(syz_tun) entered blocking state [ 362.417722][T10867] bridge0: port 3(syz_tun) entered forwarding state [ 362.813435][T10865] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1087'. [ 362.875854][T10865] netlink: 198 bytes leftover after parsing attributes in process `syz.7.1087'. [ 363.503276][T10886] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 364.557542][T10892] Process accounting resumed [ 364.923688][T10923] ubi0: attaching mtd0 [ 364.953767][T10923] ubi0: scanning is finished [ 364.973006][T10923] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 365.176273][T10923] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 368.169271][T11002] : entered promiscuous mode [ 369.116155][T11031] ima: policy update failed [ 369.179922][ T29] audit: type=1802 audit(1778817526.011:9): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1122" res=0 errno=0 [ 370.737268][ T8697] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 370.746671][ T8697] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 371.628388][ T24] Process accounting resumed [ 372.021203][T11083] Process accounting resumed [ 372.696704][T11106] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 372.712763][T11106] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 373.751831][T11119] FAULT_INJECTION: forcing a failure. [ 373.751831][T11119] name failslab, interval 1, probability 0, space 0, times 0 [ 373.831404][T11119] CPU: 1 UID: 0 PID: 11119 Comm: syz.4.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.831448][T11119] Tainted: [L]=SOFTLOCKUP [ 373.831458][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.831475][T11119] Call Trace: [ 373.831485][T11119] [ 373.831495][T11119] dump_stack_lvl+0x100/0x190 [ 373.831532][T11119] should_fail_ex.cold+0x5/0xa [ 373.831570][T11119] should_failslab+0xc2/0x120 [ 373.831606][T11119] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 373.831652][T11119] ? vm_area_dup+0x27/0x8e0 [ 373.831691][T11119] ? __lock_acquire+0x4a5/0x2630 [ 373.831726][T11119] vm_area_dup+0x27/0x8e0 [ 373.831769][T11119] __split_vma+0x18c/0xd90 [ 373.831817][T11119] ? __pfx___split_vma+0x10/0x10 [ 373.831867][T11119] ? __pfx_mas_prev+0x10/0x10 [ 373.831982][T11119] vms_gather_munmap_vmas+0x3a5/0x1720 [ 373.832033][T11119] ? validate_mm+0x392/0x4e0 [ 373.832079][T11119] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 373.832123][T11119] ? __pfx_validate_mm+0x10/0x10 [ 373.832182][T11119] ? rcu_is_watching+0x12/0xc0 [ 373.832230][T11119] do_vmi_align_munmap+0x287/0x5f0 [ 373.832281][T11119] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 373.832327][T11119] ? cap_mmap_addr+0x4b/0x120 [ 373.832475][T11119] do_vmi_munmap+0x1f8/0x3e0 [ 373.832524][T11119] __vm_munmap+0x196/0x390 [ 373.832555][T11119] ? __pfx___vm_munmap+0x10/0x10 [ 373.832607][T11119] __x64_sys_munmap+0x59/0x80 [ 373.832644][T11119] do_syscall_64+0x10b/0xf80 [ 373.832684][T11119] ? clear_bhb_loop+0x40/0x90 [ 373.832719][T11119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.832749][T11119] RIP: 0033:0x7f8666b9cc87 [ 373.832773][T11119] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.832800][T11119] RSP: 002b:00007f86649d1d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 373.832829][T11119] RAX: ffffffffffffffda RBX: 00007f8660000000 RCX: 00007f8666b9cc87 [ 373.832849][T11119] RDX: 0000000000000000 RSI: 0000000003800000 RDI: 00007f865c800000 [ 373.832866][T11119] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 373.832885][T11119] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 373.832901][T11119] R13: 0000000000001000 R14: 00007f8664000000 R15: 0000000003800000 [ 373.832937][T11119] [ 374.299135][T11121] FAULT_INJECTION: forcing a failure. [ 374.299135][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.315588][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.2.1143 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.315614][T11121] Tainted: [L]=SOFTLOCKUP [ 374.315619][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.315628][T11121] Call Trace: [ 374.315634][T11121] [ 374.315639][T11121] dump_stack_lvl+0x100/0x190 [ 374.315661][T11121] should_fail_ex.cold+0x5/0xa [ 374.315682][T11121] _copy_from_iter+0x1f4/0x1690 [ 374.315754][T11121] ? __pfx__copy_from_iter+0x10/0x10 [ 374.315774][T11121] ? __pfx___might_resched+0x10/0x10 [ 374.315791][T11121] ? kfree+0x1dd/0x6c0 [ 374.315814][T11121] file_tty_write.isra.0+0x45b/0x890 [ 374.315888][T11121] vfs_write+0x6ac/0x1070 [ 374.315908][T11121] ? __pfx_tty_write+0x10/0x10 [ 374.315931][T11121] ? __pfx_vfs_write+0x10/0x10 [ 374.315947][T11121] ? find_held_lock+0x2b/0x80 [ 374.315977][T11121] ksys_write+0x12a/0x250 [ 374.315994][T11121] ? __pfx_ksys_write+0x10/0x10 [ 374.316013][T11121] ? rcu_is_watching+0x12/0xc0 [ 374.316033][T11121] do_syscall_64+0x10b/0xf80 [ 374.316054][T11121] ? clear_bhb_loop+0x40/0x90 [ 374.316071][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.316086][T11121] RIP: 0033:0x7f1821f9ce59 [ 374.316100][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.316114][T11121] RSP: 002b:00007f1822f30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.316129][T11121] RAX: ffffffffffffffda RBX: 00007f1822215fa0 RCX: 00007f1821f9ce59 [ 374.316139][T11121] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 374.316148][T11121] RBP: 00007f1822032d6f R08: 0000000000000000 R09: 0000000000000000 [ 374.316156][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.316165][T11121] R13: 00007f1822216038 R14: 00007f1822215fa0 R15: 00007ffd8c303af8 [ 374.316193][T11121] [ 375.344832][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 375.880596][T11147] FAULT_INJECTION: forcing a failure. [ 375.880596][T11147] name failslab, interval 1, probability 0, space 0, times 0 [ 375.908808][T11147] CPU: 1 UID: 0 PID: 11147 Comm: syz.2.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.908850][T11147] Tainted: [L]=SOFTLOCKUP [ 375.908859][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.908875][T11147] Call Trace: [ 375.908884][T11147] [ 375.908894][T11147] dump_stack_lvl+0x100/0x190 [ 375.908928][T11147] should_fail_ex.cold+0x5/0xa [ 375.908962][T11147] should_failslab+0xc2/0x120 [ 375.908993][T11147] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 375.909032][T11147] ? jbd2__journal_start+0x194/0x6a0 [ 375.909075][T11147] jbd2__journal_start+0x194/0x6a0 [ 375.909116][T11147] __ext4_journal_start_sb+0x36d/0x670 [ 375.909145][T11147] ? ext4_dirty_inode+0xa1/0x130 [ 375.909179][T11147] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 375.909209][T11147] ext4_dirty_inode+0xa1/0x130 [ 375.909236][T11147] ? rcu_is_watching+0x12/0xc0 [ 375.909267][T11147] __mark_inode_dirty+0x1f3/0x1720 [ 375.909301][T11147] file_update_time_flags+0x46b/0x500 [ 375.909352][T11147] ext4_page_mkwrite+0x324/0x1890 [ 375.909391][T11147] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 375.909434][T11147] do_page_mkwrite+0x17a/0x440 [ 375.909467][T11147] ? __pfx_filemap_map_pages+0x10/0x10 [ 375.909505][T11147] do_fault+0x3b5/0x1750 [ 375.909552][T11147] __handle_mm_fault+0x187d/0x2a00 [ 375.909600][T11147] ? reacquire_held_locks+0xce/0x1e0 [ 375.909629][T11147] ? __pfx___handle_mm_fault+0x10/0x10 [ 375.909674][T11147] ? lock_vma_under_rcu+0x17c/0x590 [ 375.909722][T11147] ? lockdep_hardirqs_on+0x78/0x100 [ 375.909770][T11147] handle_mm_fault+0x36d/0xa20 [ 375.909818][T11147] do_user_addr_fault+0x5a3/0x12f0 [ 375.909859][T11147] exc_page_fault+0x6f/0xd0 [ 375.909896][T11147] asm_exc_page_fault+0x26/0x30 [ 375.909922][T11147] RIP: 0033:0x7f1821e71580 [ 375.909945][T11147] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 375.909971][T11147] RSP: 002b:00007ffd8c303b40 EFLAGS: 00010202 [ 375.909992][T11147] RAX: 0000001b346fc000 RBX: ffffffff8257e9d6 RCX: 0000001b346fbff8 [ 375.910011][T11147] RDX: 0000001b34324220 RSI: 0000000000000008 RDI: 00007f1822d45720 [ 375.910028][T11147] RBP: 000000000000002c R08: 00007f1822200000 R09: 00007f1822202000 [ 375.910045][T11147] R10: 000000008257e9da R11: 0000000000000018 R12: 00007f1822216128 [ 375.910062][T11147] R13: 000000000000002b R14: ffffffff8257e9e9 R15: 00007f1822d45720 [ 375.910081][T11147] ? __might_fault+0x79/0x140 [ 375.910122][T11147] ? __might_fault+0x66/0x140 [ 375.910173][T11147] [ 375.913828][T11149] FAULT_INJECTION: forcing a failure. [ 375.913828][T11149] name failslab, interval 1, probability 0, space 0, times 0 [ 376.202993][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.2.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.203037][T11149] Tainted: [L]=SOFTLOCKUP [ 376.203047][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.203063][T11149] Call Trace: [ 376.203071][T11149] [ 376.203082][T11149] dump_stack_lvl+0x100/0x190 [ 376.203118][T11149] should_fail_ex.cold+0x5/0xa [ 376.203154][T11149] should_failslab+0xc2/0x120 [ 376.203188][T11149] __kmalloc_cache_noprof+0x7a/0x6f0 [ 376.203228][T11149] ? sctp_auth_shkey_create+0x9e/0x210 [ 376.203337][T11149] sctp_auth_shkey_create+0x9e/0x210 [ 376.203371][T11149] sctp_endpoint_new+0x589/0xb20 [ 376.203514][T11149] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 376.203548][T11149] ? lockdep_init_map_type+0x5c/0x250 [ 376.203581][T11149] ? lockdep_init_map_type+0x5c/0x250 [ 376.203610][T11149] ? lockdep_init_map_type+0x5c/0x250 [ 376.203643][T11149] sctp_init_sock+0xe2b/0x1300 [ 376.203698][T11149] ? __pfx_sctp_init_sock+0x10/0x10 [ 376.203728][T11149] inet_create+0x94c/0x1060 [ 376.203787][T11149] ? inet_create+0x94/0x1060 [ 376.203820][T11149] __sock_create+0x339/0x860 [ 376.203917][T11149] __sys_socket+0x14d/0x260 [ 376.203959][T11149] ? __pfx___sys_socket+0x10/0x10 [ 376.204007][T11149] __x64_sys_socket+0x72/0xb0 [ 376.204044][T11149] ? lockdep_hardirqs_on+0x78/0x100 [ 376.204083][T11149] do_syscall_64+0x10b/0xf80 [ 376.204123][T11149] ? clear_bhb_loop+0x40/0x90 [ 376.204161][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.204192][T11149] RIP: 0033:0x7f1821f9ce59 [ 376.204216][T11149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.204243][T11149] RSP: 002b:00007f1822f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 376.204270][T11149] RAX: ffffffffffffffda RBX: 00007f1822216090 RCX: 00007f1821f9ce59 [ 376.204292][T11149] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 376.204308][T11149] RBP: 00007f1822032d6f R08: 0000000000000000 R09: 0000000000000000 [ 376.204325][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.204340][T11149] R13: 00007f1822216128 R14: 00007f1822216090 R15: 00007ffd8c303af8 [ 376.204375][T11149] [ 377.412978][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 377.807129][T11195] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1161'. [ 378.132901][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1165'. [ 378.157350][T11206] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1165'. [ 378.167224][T11206] FAULT_INJECTION: forcing a failure. [ 378.167224][T11206] name failslab, interval 1, probability 0, space 0, times 0 [ 378.180687][T11206] CPU: 1 UID: 0 PID: 11206 Comm: syz.6.1165 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.180731][T11206] Tainted: [L]=SOFTLOCKUP [ 378.180740][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.180757][T11206] Call Trace: [ 378.180776][T11206] [ 378.180787][T11206] dump_stack_lvl+0x100/0x190 [ 378.180825][T11206] should_fail_ex.cold+0x5/0xa [ 378.180862][T11206] should_failslab+0xc2/0x120 [ 378.180896][T11206] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 378.180928][T11206] ? kasprintf+0xc7/0x100 [ 378.181039][T11206] kvasprintf+0xbc/0x150 [ 378.181070][T11206] ? __pfx_kvasprintf+0x10/0x10 [ 378.181101][T11206] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 378.181197][T11206] ? lockdep_hardirqs_on+0x78/0x100 [ 378.181240][T11206] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 378.181286][T11206] kasprintf+0xc7/0x100 [ 378.181315][T11206] ? __pfx_kasprintf+0x10/0x10 [ 378.181355][T11206] ? lockdep_init_map_type+0x5c/0x250 [ 378.181391][T11206] ieee80211_alloc_led_names+0x11b/0x420 [ 378.181473][T11206] ieee80211_alloc_hw_nm+0x1969/0x22e0 [ 378.181571][T11206] mac80211_hwsim_new_radio+0x1de/0x5aa0 [ 378.181654][T11206] ? __pfx__printk+0x10/0x10 [ 378.181682][T11206] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 378.181734][T11206] ? rcu_is_watching+0x12/0xc0 [ 378.181776][T11206] ? do_trace_netlink_extack+0x74/0x1f0 [ 378.181841][T11206] ? __nla_validate_parse+0x1e7/0x28b0 [ 378.181987][T11206] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 378.182030][T11206] hwsim_new_radio_nl+0xc5f/0x1370 [ 378.182062][T11206] ? rcu_is_watching+0x12/0xc0 [ 378.182098][T11206] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 378.182141][T11206] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 378.182188][T11206] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 378.182243][T11206] genl_family_rcv_msg_doit+0x214/0x300 [ 378.182309][T11206] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 378.182355][T11206] ? genl_get_cmd+0x3e7/0x760 [ 378.182407][T11206] ? bpf_lsm_capable+0x9/0x10 [ 378.182439][T11206] ? security_capable+0x80/0x260 [ 378.182513][T11206] ? ns_capable+0xd2/0xf0 [ 378.182552][T11206] genl_rcv_msg+0x560/0x800 [ 378.182602][T11206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.182649][T11206] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 378.182695][T11206] netlink_rcv_skb+0x159/0x420 [ 378.182736][T11206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.182789][T11206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.182844][T11206] ? rcu_is_watching+0x12/0xc0 [ 378.182888][T11206] genl_rcv+0x28/0x40 [ 378.182928][T11206] netlink_unicast+0x585/0x850 [ 378.182975][T11206] ? __pfx_netlink_unicast+0x10/0x10 [ 378.183025][T11206] netlink_sendmsg+0x8b0/0xda0 [ 378.183072][T11206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.183112][T11206] ? __import_iovec+0x1d2/0x640 [ 378.183145][T11206] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 378.183249][T11206] ____sys_sendmsg+0x9e1/0xb70 [ 378.183289][T11206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.183333][T11206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.183382][T11206] ? __pfx_futex_wake_mark+0x10/0x10 [ 378.183426][T11206] ___sys_sendmsg+0x190/0x1e0 [ 378.183471][T11206] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.183559][T11206] __sys_sendmsg+0x170/0x220 [ 378.183622][T11206] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.183655][T11206] ? __x64_sys_futex+0x34f/0x4d0 [ 378.183702][T11206] ? rcu_is_watching+0x12/0xc0 [ 378.183743][T11206] do_syscall_64+0x10b/0xf80 [ 378.183791][T11206] ? clear_bhb_loop+0x40/0x90 [ 378.183827][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.183856][T11206] RIP: 0033:0x7f994359ce59 [ 378.183881][T11206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.183908][T11206] RSP: 002b:00007f99443c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.183935][T11206] RAX: ffffffffffffffda RBX: 00007f9943815fa0 RCX: 00007f994359ce59 [ 378.183955][T11206] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000006 [ 378.183973][T11206] RBP: 00007f9943632d6f R08: 0000000000000000 R09: 0000000000000000 [ 378.183990][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.184008][T11206] R13: 00007f9943816038 R14: 00007f9943815fa0 R15: 00007fff6eed1538 [ 378.184046][T11206] [ 378.687877][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.694321][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.409229][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 380.849086][T11258] can0: slcan on ttyS2. [ 380.931513][T11258] can0 (unregistered): slcan off ttyS2. [ 381.254130][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1177'. [ 382.579081][ T8404] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 382.590138][ T8404] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 382.607660][ T8404] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 382.622007][ T8404] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 382.636309][ T8404] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 384.304014][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.320163][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.330648][T11318] bridge_slave_0: entered allmulticast mode [ 384.337850][T11318] bridge_slave_0: entered promiscuous mode [ 384.349449][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.358815][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.372280][T11318] bridge_slave_1: entered allmulticast mode [ 384.388166][T11318] bridge_slave_1: entered promiscuous mode [ 384.458034][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.486195][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.549259][T11318] team0: Port device team_slave_0 added [ 384.635237][T11318] team0: Port device team_slave_1 added [ 384.699237][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.722504][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.748715][ T8697] Bluetooth: hci8: command tx timeout [ 384.829643][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.866634][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 384.873678][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.892404][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.970613][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.132489][T11318] hsr_slave_0: entered promiscuous mode [ 385.145745][T11318] hsr_slave_1: entered promiscuous mode [ 385.164211][T11318] debugfs: 'hsr0' already exists in 'hsr' [ 385.175318][T11318] Cannot create hsr debugfs directory [ 385.460035][ T8404] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 385.606827][T11318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 385.631176][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.652913][T11318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 385.680341][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.706930][T11318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 385.744601][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.770435][T11318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 385.794968][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.096516][T11318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.322225][T11318] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.355819][T11398] futex_wake_op: syz.4.1194 tries to shift op by -2048; fix this program [ 386.373763][T11398] futex_wake_op: syz.4.1194 tries to shift op by -2048; fix this program [ 386.406431][T11398] 0x000000000001-0x000000020000 : "" [ 386.467741][T11402] futex_wake_op: syz.6.1195 tries to shift op by -2048; fix this program [ 386.493273][T11398] ftl_cs: FTL header corrupt! [ 386.501183][T11402] futex_wake_op: syz.6.1195 tries to shift op by -2048; fix this program [ 386.593644][T11405] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 386.675981][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.683148][ T9290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.820307][ T8404] Bluetooth: hci8: command tx timeout [ 386.861671][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.868788][ T9290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.627622][T11427] FAULT_INJECTION: forcing a failure. [ 387.627622][T11427] name failslab, interval 1, probability 0, space 0, times 0 [ 387.666528][T11427] CPU: 1 UID: 0 PID: 11427 Comm: syz.6.1201 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.666575][T11427] Tainted: [L]=SOFTLOCKUP [ 387.666585][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.666602][T11427] Call Trace: [ 387.666611][T11427] [ 387.666622][T11427] dump_stack_lvl+0x100/0x190 [ 387.666657][T11427] should_fail_ex.cold+0x5/0xa [ 387.666693][T11427] ? tomoyo_encode2+0xfb/0x3c0 [ 387.666795][T11427] should_failslab+0xc2/0x120 [ 387.666831][T11427] __kmalloc_noprof+0xe0/0x850 [ 387.666865][T11427] tomoyo_encode2+0xfb/0x3c0 [ 387.666906][T11427] tomoyo_encode+0x29/0x50 [ 387.666940][T11427] tomoyo_realpath_from_path+0x18c/0x690 [ 387.666985][T11427] tomoyo_path_number_perm+0x23c/0x580 [ 387.667014][T11427] ? tomoyo_path_number_perm+0x22e/0x580 [ 387.667048][T11427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.667078][T11427] ? futex_wait+0x11e/0x370 [ 387.667149][T11427] ? find_held_lock+0x2b/0x80 [ 387.667186][T11427] ? __fget_files+0x215/0x3d0 [ 387.667217][T11427] ? hook_file_ioctl_common+0x149/0x410 [ 387.667278][T11427] ? __fget_files+0x215/0x3d0 [ 387.667318][T11427] ? __fget_files+0x21f/0x3d0 [ 387.667356][T11427] security_file_ioctl+0xd3/0x230 [ 387.667389][T11427] __x64_sys_ioctl+0xb7/0x210 [ 387.667420][T11427] do_syscall_64+0x10b/0xf80 [ 387.667461][T11427] ? clear_bhb_loop+0x40/0x90 [ 387.667503][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.667532][T11427] RIP: 0033:0x7f994359ce59 [ 387.667555][T11427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.667582][T11427] RSP: 002b:00007f99443c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.667609][T11427] RAX: ffffffffffffffda RBX: 00007f9943815fa0 RCX: 00007f994359ce59 [ 387.667629][T11427] RDX: 0000200000000080 RSI: 0000000040046210 RDI: 0000000000000003 [ 387.667647][T11427] RBP: 00007f9943632d6f R08: 0000000000000000 R09: 0000000000000000 [ 387.667664][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.667682][T11427] R13: 00007f9943816038 R14: 00007f9943815fa0 R15: 00007fff6eed1538 [ 387.667719][T11427] [ 387.667744][T11427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.920532][T11431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1203'. [ 387.952355][T11430] bond0: invalid ARP target specified [ 387.958787][T11431] nbd: must specify at least one socket [ 388.534928][T11318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.930851][ T8404] Bluetooth: hci8: command tx timeout [ 389.324376][T11318] veth0_vlan: entered promiscuous mode [ 389.347832][T11318] veth1_vlan: entered promiscuous mode [ 389.469859][T11318] veth0_macvtap: entered promiscuous mode [ 389.511530][T11471] FAULT_INJECTION: forcing a failure. [ 389.511530][T11471] name failslab, interval 1, probability 0, space 0, times 0 [ 389.518909][T11318] veth1_macvtap: entered promiscuous mode [ 389.543356][T11471] CPU: 1 UID: 0 PID: 11471 Comm: syz.6.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.543400][T11471] Tainted: [L]=SOFTLOCKUP [ 389.543409][T11471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.543426][T11471] Call Trace: [ 389.543436][T11471] [ 389.543446][T11471] dump_stack_lvl+0x100/0x190 [ 389.543483][T11471] should_fail_ex.cold+0x5/0xa [ 389.543520][T11471] ? tomoyo_realpath_from_path+0xb6/0x690 [ 389.543557][T11471] should_failslab+0xc2/0x120 [ 389.543592][T11471] __kmalloc_noprof+0xe0/0x850 [ 389.543618][T11471] ? kfree+0x1dd/0x6c0 [ 389.543662][T11471] tomoyo_realpath_from_path+0xb6/0x690 [ 389.543708][T11471] tomoyo_path_perm+0x276/0x460 [ 389.543737][T11471] ? tomoyo_path_perm+0x262/0x460 [ 389.543769][T11471] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 389.543817][T11471] ? lockdown_is_locked_down+0x3d/0x140 [ 389.543948][T11471] ? __pfx_ima_file_check+0x10/0x10 [ 389.544022][T11471] ? hook_file_truncate+0xc3/0x240 [ 389.544063][T11471] security_file_truncate+0xb5/0x1e0 [ 389.544099][T11471] path_openat+0x1c6e/0x31a0 [ 389.544143][T11471] ? __pfx_path_openat+0x10/0x10 [ 389.544193][T11471] do_file_open+0x20e/0x430 [ 389.544233][T11471] ? __pfx_do_file_open+0x10/0x10 [ 389.544296][T11471] ? alloc_fd+0x476/0x790 [ 389.544335][T11471] ? do_getname+0x191/0x390 [ 389.544380][T11471] do_sys_openat2+0x10d/0x1e0 [ 389.544424][T11471] ? __pfx_do_sys_openat2+0x10/0x10 [ 389.544470][T11471] ? __fget_files+0x21f/0x3d0 [ 389.544512][T11471] __x64_sys_openat+0x12d/0x210 [ 389.544558][T11471] ? __pfx___x64_sys_openat+0x10/0x10 [ 389.544610][T11471] ? rcu_is_watching+0x12/0xc0 [ 389.544650][T11471] do_syscall_64+0x10b/0xf80 [ 389.544692][T11471] ? clear_bhb_loop+0x40/0x90 [ 389.544726][T11471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.544757][T11471] RIP: 0033:0x7f994359ce59 [ 389.544780][T11471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.544807][T11471] RSP: 002b:00007f99443a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 389.544834][T11471] RAX: ffffffffffffffda RBX: 00007f9943816090 RCX: 00007f994359ce59 [ 389.544853][T11471] RDX: 0000000000008742 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 389.544872][T11471] RBP: 00007f9943632d6f R08: 0000000000000000 R09: 0000000000000000 [ 389.544889][T11471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.544905][T11471] R13: 00007f9943816128 R14: 00007f9943816090 R15: 00007fff6eed1538 [ 389.544945][T11471] [ 389.548682][T11471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.635581][T11318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.846483][T11318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.867745][ T9282] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.897891][ T9282] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.928289][ T9282] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.952320][ T9282] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.151004][ T9301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.171089][ T9301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.222408][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 390.226250][ T9282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.245167][ T9282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.982024][ T8404] Bluetooth: hci8: command tx timeout [ 392.232861][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1222'. [ 394.569409][T11569] Process accounting paused [ 397.008068][ T8404] Bluetooth: hci6: unexpected subevent 0x01 length: 125 > 18 [ 397.228307][T11666] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 397.534710][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 397.705663][T11683] ubi0: attaching mtd0 [ 397.783466][T11683] ubi0: scanning is finished [ 397.788533][T11683] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 397.897968][T11671] zswap: compressor 000 not available [ 398.103312][T11683] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 399.067179][ T8697] Bluetooth: hci6: command 0x2016 tx timeout [ 399.371530][T11738] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 399.583693][T11743] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 401.151113][ T8697] Bluetooth: hci6: command 0x2016 tx timeout [ 401.583547][T11776] can0: slcan on ttyS2. [ 401.809812][T11776] can0 (unregistered): slcan off ttyS2. [ 402.354732][T11808] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 402.413935][T11808] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 403.422572][T11797] Process accounting paused [ 404.304286][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1273'. [ 404.344545][T11857] FAULT_INJECTION: forcing a failure. [ 404.344545][T11857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.436958][T11857] CPU: 1 UID: 0 PID: 11857 Comm: syz.8.1270 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.437003][T11857] Tainted: [L]=SOFTLOCKUP [ 404.437012][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.437028][T11857] Call Trace: [ 404.437037][T11857] [ 404.437048][T11857] dump_stack_lvl+0x100/0x190 [ 404.437086][T11857] should_fail_ex.cold+0x5/0xa [ 404.437116][T11857] ? prepare_alloc_pages+0x16d/0x5f0 [ 404.437157][T11857] should_fail_alloc_page+0xeb/0x140 [ 404.437192][T11857] prepare_alloc_pages+0x1f0/0x5f0 [ 404.437234][T11857] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 404.437292][T11857] ? __lock_acquire+0x4a5/0x2630 [ 404.437319][T11857] ? trace_mm_page_alloc+0x163/0x1d0 [ 404.437360][T11857] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 404.437411][T11857] ? lock_acquire+0x1b1/0x370 [ 404.437451][T11857] ? page_table_check_set+0x486/0x920 [ 404.437487][T11857] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.437535][T11857] ? policy_nodemask+0xed/0x4f0 [ 404.437572][T11857] alloc_pages_mpol+0x1fb/0x540 [ 404.437616][T11857] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 404.437655][T11857] ? do_raw_spin_unlock+0x145/0x1e0 [ 404.437690][T11857] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 404.437732][T11857] ? debug_object_assert_init+0x1c4/0x300 [ 404.437873][T11857] folio_alloc_mpol_noprof+0x36/0x260 [ 404.437916][T11857] vma_alloc_folio_noprof+0xed/0x1d0 [ 404.437952][T11857] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 404.437995][T11857] ? rcu_read_unlock+0x2d/0xb0 [ 404.438037][T11857] ? rcu_read_unlock+0x2d/0xb0 [ 404.438088][T11857] do_wp_page+0x1ee1/0x4350 [ 404.438135][T11857] ? __pfx_do_wp_page+0x10/0x10 [ 404.438175][T11857] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 404.438219][T11857] __handle_mm_fault+0x1ab6/0x2a00 [ 404.438269][T11857] ? reacquire_held_locks+0xce/0x1e0 [ 404.438298][T11857] ? __pfx___handle_mm_fault+0x10/0x10 [ 404.438345][T11857] ? lock_vma_under_rcu+0x17c/0x590 [ 404.438408][T11857] handle_mm_fault+0x36d/0xa20 [ 404.438455][T11857] do_user_addr_fault+0x5a3/0x12f0 [ 404.438496][T11857] exc_page_fault+0x6f/0xd0 [ 404.438536][T11857] asm_exc_page_fault+0x26/0x30 [ 404.438565][T11857] RIP: 0033:0x7f3fea75cc45 [ 404.438587][T11857] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 404.438613][T11857] RSP: 002b:00007f3feb5ecde0 EFLAGS: 00010293 [ 404.438643][T11857] RAX: 0000000000000008 RBX: 00007f3feb547e20 RCX: 0000000000000000 [ 404.438661][T11857] RDX: 0000000000000000 RSI: 00007f3fea84ff57 RDI: 00007f3feb547e20 [ 404.438680][T11857] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 404.438698][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fea84fd4d [ 404.438715][T11857] R13: ffffffffffffffe8 R14: 0000000000000009 R15: 00007f3fea84ff57 [ 404.438754][T11857] [ 404.933863][T11851] Process accounting resumed [ 405.254017][ T29] audit: type=1326 audit(1778817562.063:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.1275" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8666b9ce59 code=0x0 [ 405.376887][ T29] audit: type=1326 audit(1778817562.093:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.1275" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8666b9ce59 code=0x0 [ 405.441439][ T29] audit: type=1400 audit(1778817562.123:12): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11869 comm="syz.4.1275" [ 406.279736][T11892] FAULT_INJECTION: forcing a failure. [ 406.279736][T11892] name failslab, interval 1, probability 0, space 0, times 0 [ 406.342722][T11892] CPU: 1 UID: 5 PID: 11892 Comm: syz.4.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.342773][T11892] Tainted: [L]=SOFTLOCKUP [ 406.342784][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.342801][T11892] Call Trace: [ 406.342810][T11892] [ 406.342821][T11892] dump_stack_lvl+0x100/0x190 [ 406.342861][T11892] should_fail_ex.cold+0x5/0xa [ 406.342897][T11892] should_failslab+0xc2/0x120 [ 406.342933][T11892] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 406.342979][T11892] ? __d_alloc+0x34/0xa40 [ 406.343026][T11892] __d_alloc+0x34/0xa40 [ 406.343070][T11892] d_alloc+0x4a/0x1e0 [ 406.343110][T11892] lookup_one_qstr_excl+0x171/0x250 [ 406.343159][T11892] start_dirop+0x59/0xb0 [ 406.343194][T11892] simple_start_creating+0xf9/0x110 [ 406.343229][T11892] ? __pfx_simple_start_creating+0x10/0x10 [ 406.343265][T11892] ? mntput+0x70/0xa0 [ 406.343296][T11892] ? simple_pin_fs+0xa3/0x190 [ 406.343329][T11892] debugfs_start_creating.part.0+0x82/0x170 [ 406.343480][T11892] __debugfs_create_file+0xb3/0x4f0 [ 406.343531][T11892] debugfs_create_file_full+0x41/0x60 [ 406.343584][T11892] kvm_dev_ioctl+0x16c8/0x1a50 [ 406.343639][T11892] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 406.343691][T11892] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 406.343735][T11892] __x64_sys_ioctl+0x18e/0x210 [ 406.343768][T11892] do_syscall_64+0x10b/0xf80 [ 406.343809][T11892] ? clear_bhb_loop+0x40/0x90 [ 406.343845][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.343876][T11892] RIP: 0033:0x7f8666b9ce59 [ 406.343900][T11892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.343929][T11892] RSP: 002b:00007f866799b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.343956][T11892] RAX: ffffffffffffffda RBX: 00007f8666e15fa0 RCX: 00007f8666b9ce59 [ 406.343976][T11892] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 406.343993][T11892] RBP: 00007f8666c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 406.344011][T11892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.344028][T11892] R13: 00007f8666e16038 R14: 00007f8666e15fa0 R15: 00007ffcf2652aa8 [ 406.344067][T11892] [ 406.779806][T11897] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 407.028826][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1282'. [ 407.069371][T11899] ovs_: entered promiscuous mode [ 407.480970][T11916] Line length is too long: Should be less than 4094 [ 407.912291][T11924] FAULT_INJECTION: forcing a failure. [ 407.912291][T11924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.064702][T11924] CPU: 1 UID: 0 PID: 11924 Comm: syz.6.1285 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.064746][T11924] Tainted: [L]=SOFTLOCKUP [ 408.064755][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.064771][T11924] Call Trace: [ 408.064780][T11924] [ 408.064791][T11924] dump_stack_lvl+0x100/0x190 [ 408.064827][T11924] should_fail_ex.cold+0x5/0xa [ 408.064859][T11924] ? prepare_alloc_pages+0x16d/0x5f0 [ 408.064895][T11924] should_fail_alloc_page+0xeb/0x140 [ 408.064926][T11924] prepare_alloc_pages+0x1f0/0x5f0 [ 408.064966][T11924] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 408.065018][T11924] ? lock_acquire+0x1b1/0x370 [ 408.065047][T11924] ? find_held_lock+0x2b/0x80 [ 408.065084][T11924] ? page_table_check_set+0x477/0x920 [ 408.065125][T11924] ? page_table_check_set+0x477/0x920 [ 408.065162][T11924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.065211][T11924] ? page_table_check_set+0x486/0x920 [ 408.065249][T11924] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 408.065282][T11924] ? xas_move_index+0xae/0x110 [ 408.065337][T11924] ? find_held_lock+0x2b/0x80 [ 408.065372][T11924] ? find_held_lock+0x2b/0x80 [ 408.065408][T11924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.065452][T11924] ? policy_nodemask+0xed/0x4f0 [ 408.065489][T11924] alloc_pages_mpol+0x1fb/0x540 [ 408.065525][T11924] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 408.065563][T11924] ? __lock_acquire+0x4a5/0x2630 [ 408.065595][T11924] folio_alloc_mpol_noprof+0x36/0x260 [ 408.065637][T11924] vma_alloc_folio_noprof+0xed/0x1d0 [ 408.065675][T11924] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 408.065725][T11924] do_anonymous_page+0xb46/0x2050 [ 408.065770][T11924] ? rcu_read_unlock+0x2d/0xb0 [ 408.065823][T11924] __handle_mm_fault+0x1d2c/0x2a00 [ 408.065874][T11924] ? reacquire_held_locks+0xce/0x1e0 [ 408.065904][T11924] ? __pfx___handle_mm_fault+0x10/0x10 [ 408.065953][T11924] ? lock_vma_under_rcu+0x17c/0x590 [ 408.066015][T11924] handle_mm_fault+0x36d/0xa20 [ 408.066065][T11924] do_user_addr_fault+0x5a3/0x12f0 [ 408.066118][T11924] exc_page_fault+0x6f/0xd0 [ 408.066161][T11924] asm_exc_page_fault+0x26/0x30 [ 408.066190][T11924] RIP: 0033:0x7f994345e60b [ 408.066214][T11924] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 408.066242][T11924] RSP: 002b:00007f99413f2fa0 EFLAGS: 00010206 [ 408.066265][T11924] RAX: 0000000000000000 RBX: 00007f9943816270 RCX: 0000000000000000 [ 408.066283][T11924] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000140 [ 408.066301][T11924] RBP: 00007f9943632d6f R08: 0000000000000000 R09: 0000000000000000 [ 408.066319][T11924] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000 [ 408.066336][T11924] R13: 00007f9943816308 R14: 00007f9943816270 R15: 00007fff6eed1538 [ 408.066375][T11924] [ 408.260734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 409.345329][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 409.445590][T11950] random: crng reseeded on system resumption [ 410.287181][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'. [ 412.130805][T12005] FAULT_INJECTION: forcing a failure. [ 412.130805][T12005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 412.147258][T12005] CPU: 1 UID: 0 PID: 12005 Comm: syz.4.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.147306][T12005] Tainted: [L]=SOFTLOCKUP [ 412.147316][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.147332][T12005] Call Trace: [ 412.147341][T12005] [ 412.147351][T12005] dump_stack_lvl+0x100/0x190 [ 412.147388][T12005] should_fail_ex.cold+0x5/0xa [ 412.147419][T12005] ? prepare_alloc_pages+0x16d/0x5f0 [ 412.147461][T12005] should_fail_alloc_page+0xeb/0x140 [ 412.147497][T12005] prepare_alloc_pages+0x1f0/0x5f0 [ 412.147540][T12005] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 412.147598][T12005] ? __lock_acquire+0x4a5/0x2630 [ 412.147627][T12005] ? trace_mm_page_alloc+0x163/0x1d0 [ 412.147668][T12005] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 412.147719][T12005] ? lock_acquire+0x1b1/0x370 [ 412.147747][T12005] ? find_held_lock+0x2b/0x80 [ 412.147783][T12005] ? page_table_check_set+0x477/0x920 [ 412.147823][T12005] ? page_table_check_set+0x486/0x920 [ 412.147859][T12005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.147903][T12005] ? policy_nodemask+0xed/0x4f0 [ 412.147940][T12005] alloc_pages_mpol+0x1fb/0x540 [ 412.147976][T12005] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 412.148010][T12005] ? filemap_map_pages+0x950/0x2140 [ 412.148036][T12005] ? filemap_map_pages+0x950/0x2140 [ 412.148069][T12005] folio_alloc_mpol_noprof+0x36/0x260 [ 412.148110][T12005] vma_alloc_folio_noprof+0xed/0x1d0 [ 412.148149][T12005] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 412.148186][T12005] ? rcu_read_unlock+0x2d/0xb0 [ 412.148228][T12005] ? rcu_read_unlock+0x2d/0xb0 [ 412.148286][T12005] do_wp_page+0x1ee1/0x4350 [ 412.148336][T12005] ? __pfx_do_wp_page+0x10/0x10 [ 412.148377][T12005] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 412.148421][T12005] __handle_mm_fault+0x1ab6/0x2a00 [ 412.148472][T12005] ? reacquire_held_locks+0xce/0x1e0 [ 412.148502][T12005] ? __pfx___handle_mm_fault+0x10/0x10 [ 412.148551][T12005] ? lock_vma_under_rcu+0x17c/0x590 [ 412.148613][T12005] handle_mm_fault+0x36d/0xa20 [ 412.148662][T12005] do_user_addr_fault+0x5a3/0x12f0 [ 412.148712][T12005] exc_page_fault+0x6f/0xd0 [ 412.148754][T12005] asm_exc_page_fault+0x26/0x30 [ 412.148783][T12005] RIP: 0033:0x7f8666b5cc45 [ 412.148806][T12005] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 412.148831][T12005] RSP: 002b:00007f86649d1de0 EFLAGS: 00010293 [ 412.148844][T12005] RAX: 0000000000000008 RBX: 00007f8667947e20 RCX: 0000000000000000 [ 412.148854][T12005] RDX: 0000000000000000 RSI: 00007f8666c4ff57 RDI: 00007f8667947e20 [ 412.148863][T12005] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 412.148873][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8666c4fd4d [ 412.148882][T12005] R13: ffffffffffffffe8 R14: 0000000000000009 R15: 00007f8666c4ff57 [ 412.148902][T12005] [ 412.856796][T12005] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 413.372197][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 413.502050][ T29] audit: type=1800 audit(1778817570.309:13): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1304" name="dbroot" dev="configfs" ino=42398 res=0 errno=0 [ 414.302638][ T8404] Bluetooth: hci8: unexpected event 0x3e length: 726 > 260 [ 414.302673][ T8404] Bluetooth: hci8: unexpected subevent 0x0d length: 725 > 260 [ 414.322245][ T8404] Bluetooth: hci8: Unknown advertising packet type: 0x3e [ 414.916916][ T8697] Bluetooth: hci8: unexpected event 0x3e length: 508 > 260 [ 414.927342][ T8697] Bluetooth: hci8: unexpected subevent 0x02 length: 507 > 260 [ 414.942099][ T8697] Bluetooth: hci8: Dropping invalid advertising data [ 414.952208][ T8697] Bluetooth: hci8: unknown advertising packet type: 0xe9 [ 414.953045][ T8697] Bluetooth: hci8: unknown advertising packet type: 0x8b [ 414.960430][ T8697] Bluetooth: hci8: unknown advertising packet type: 0xee [ 415.413128][T12042] hub 1-0:1.0: USB hub found [ 415.441062][T12042] hub 1-0:1.0: 1 port detected [ 415.494261][T12040] FAULT_INJECTION: forcing a failure. [ 415.494261][T12040] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.528325][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.4.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.528368][T12040] Tainted: [L]=SOFTLOCKUP [ 415.528378][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.528393][T12040] Call Trace: [ 415.528401][T12040] [ 415.528411][T12040] dump_stack_lvl+0x100/0x190 [ 415.528446][T12040] should_fail_ex.cold+0x5/0xa [ 415.528474][T12040] ? rcu_is_watching+0x12/0xc0 [ 415.528517][T12040] get_futex_key+0x1d2/0x1510 [ 415.528549][T12040] ? __pfx_get_futex_key+0x10/0x10 [ 415.528589][T12040] futex_wait_setup+0x83/0x510 [ 415.528633][T12040] __futex_wait+0x19f/0x300 [ 415.528671][T12040] ? __pfx___futex_wait+0x10/0x10 [ 415.528713][T12040] ? __pfx_futex_wake_mark+0x10/0x10 [ 415.528753][T12040] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 415.528782][T12040] ? __hrtimer_setup+0x208/0x330 [ 415.528815][T12040] ? ktime_add_safe+0x60/0x70 [ 415.528848][T12040] futex_wait+0xe6/0x370 [ 415.528883][T12040] ? __pfx_futex_wait+0x10/0x10 [ 415.528923][T12040] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 415.528963][T12040] do_futex+0x1ef/0x350 [ 415.528994][T12040] ? __pfx_do_futex+0x10/0x10 [ 415.529023][T12040] ? ktime_get+0x22c/0x320 [ 415.529061][T12040] ? lockdep_hardirqs_on+0x78/0x100 [ 415.529107][T12040] __x64_sys_futex+0x34f/0x4d0 [ 415.529142][T12040] ? __pfx___x64_sys_futex+0x10/0x10 [ 415.529172][T12040] ? rcu_is_watching+0x12/0xc0 [ 415.529210][T12040] ? rcu_is_watching+0x12/0xc0 [ 415.529246][T12040] do_syscall_64+0x10b/0xf80 [ 415.529284][T12040] ? clear_bhb_loop+0x40/0x90 [ 415.529317][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.529345][T12040] RIP: 0033:0x7f8666b9ce59 [ 415.529368][T12040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.529395][T12040] RSP: 002b:00007ffcf2652c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.529422][T12040] RAX: ffffffffffffffda RBX: 000000000006564e RCX: 00007f8666b9ce59 [ 415.529440][T12040] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8666e15fac [ 415.529457][T12040] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 415.529474][T12040] R10: 00007ffcf2652d10 R11: 0000000000000246 R12: 00007ffcf2652d30 [ 415.529492][T12040] R13: 00007f8666e15fac R14: 0000000000065680 R15: 00007ffcf2652d10 [ 415.529534][T12040] [ 416.602282][ T8697] Bluetooth: hci4: command 0x0406 tx timeout [ 416.672870][T12052] FAULT_INJECTION: forcing a failure. [ 416.672870][T12052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 416.698268][T12052] CPU: 1 UID: 0 PID: 12052 Comm: syz.8.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.698311][T12052] Tainted: [L]=SOFTLOCKUP [ 416.698321][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.698337][T12052] Call Trace: [ 416.698345][T12052] [ 416.698355][T12052] dump_stack_lvl+0x100/0x190 [ 416.698399][T12052] should_fail_ex.cold+0x5/0xa [ 416.698429][T12052] ? prepare_alloc_pages+0x16d/0x5f0 [ 416.698467][T12052] should_fail_alloc_page+0xeb/0x140 [ 416.698505][T12052] prepare_alloc_pages+0x1f0/0x5f0 [ 416.698548][T12052] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 416.698606][T12052] ? __lock_acquire+0x4a5/0x2630 [ 416.698633][T12052] ? trace_mm_page_alloc+0x163/0x1d0 [ 416.698674][T12052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.698725][T12052] ? lock_acquire+0x1b1/0x370 [ 416.698751][T12052] ? find_held_lock+0x2b/0x80 [ 416.698786][T12052] ? page_table_check_set+0x477/0x920 [ 416.698814][T12052] ? page_table_check_set+0x486/0x920 [ 416.698831][T12052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.698872][T12052] ? policy_nodemask+0xed/0x4f0 [ 416.698892][T12052] alloc_pages_mpol+0x1fb/0x540 [ 416.698911][T12052] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 416.698929][T12052] ? filemap_map_pages+0x950/0x2140 [ 416.698942][T12052] ? filemap_map_pages+0x950/0x2140 [ 416.698959][T12052] folio_alloc_mpol_noprof+0x36/0x260 [ 416.698979][T12052] vma_alloc_folio_noprof+0xed/0x1d0 [ 416.698999][T12052] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 416.699018][T12052] ? rcu_read_unlock+0x2d/0xb0 [ 416.699038][T12052] ? rcu_read_unlock+0x2d/0xb0 [ 416.699064][T12052] do_wp_page+0x1ee1/0x4350 [ 416.699088][T12052] ? __pfx_do_wp_page+0x10/0x10 [ 416.699108][T12052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 416.699131][T12052] __handle_mm_fault+0x1ab6/0x2a00 [ 416.699156][T12052] ? reacquire_held_locks+0xce/0x1e0 [ 416.699171][T12052] ? __pfx___handle_mm_fault+0x10/0x10 [ 416.699198][T12052] ? lock_vma_under_rcu+0x17c/0x590 [ 416.699229][T12052] handle_mm_fault+0x36d/0xa20 [ 416.699254][T12052] do_user_addr_fault+0x5a3/0x12f0 [ 416.699277][T12052] exc_page_fault+0x6f/0xd0 [ 416.699299][T12052] asm_exc_page_fault+0x26/0x30 [ 416.699314][T12052] RIP: 0033:0x7f3fea75cc45 [ 416.699327][T12052] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 416.699342][T12052] RSP: 002b:00007f3feb60dde0 EFLAGS: 00010293 [ 416.699354][T12052] RAX: 0000000000000008 RBX: 00007f3feb547e20 RCX: 0000000000000000 [ 416.699369][T12052] RDX: 0000000000000000 RSI: 00007f3fea84ff57 RDI: 00007f3feb547e20 [ 416.699379][T12052] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 416.699388][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fea84fd4d [ 416.699397][T12052] R13: ffffffffffffffe8 R14: 0000000000000009 R15: 00007f3fea84ff57 [ 416.699416][T12052] [ 416.700979][T12052] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 417.889509][T12066] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 419.251332][T12075] netlink: 314 bytes leftover after parsing attributes in process `syz.8.1319'. [ 419.278318][T12075] netlink: 314 bytes leftover after parsing attributes in process `syz.8.1319'. [ 419.446119][T12077] bond0: invalid ARP target specified [ 419.734804][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1321'. [ 421.595184][ T29] audit: type=1800 audit(1778817578.395:14): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1324" name="dbroot" dev="configfs" ino=42507 res=0 errno=0 [ 424.060989][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 424.471799][ T8697] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 424.486418][ T8697] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 424.495158][ T8697] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 424.504073][ T8697] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 424.513998][ T8697] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.042221][T12138] FAULT_INJECTION: forcing a failure. [ 425.042221][T12138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.069627][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.4.1332 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.069667][T12138] Tainted: [L]=SOFTLOCKUP [ 425.069676][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.069691][T12138] Call Trace: [ 425.069700][T12138] [ 425.069711][T12138] dump_stack_lvl+0x100/0x190 [ 425.069744][T12138] should_fail_ex.cold+0x5/0xa [ 425.069773][T12138] ? prepare_alloc_pages+0x16d/0x5f0 [ 425.069813][T12138] should_fail_alloc_page+0xeb/0x140 [ 425.069848][T12138] prepare_alloc_pages+0x1f0/0x5f0 [ 425.069889][T12138] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 425.069941][T12138] ? __lock_acquire+0x4a5/0x2630 [ 425.069966][T12138] ? trace_mm_page_alloc+0x163/0x1d0 [ 425.070005][T12138] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.070054][T12138] ? lock_acquire+0x1b1/0x370 [ 425.070091][T12138] ? page_table_check_set+0x486/0x920 [ 425.070125][T12138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.070164][T12138] ? policy_nodemask+0xed/0x4f0 [ 425.070196][T12138] alloc_pages_mpol+0x1fb/0x540 [ 425.070230][T12138] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.070274][T12138] ? filemap_map_pages+0x950/0x2140 [ 425.070300][T12138] ? filemap_map_pages+0x950/0x2140 [ 425.070334][T12138] folio_alloc_mpol_noprof+0x36/0x260 [ 425.070373][T12138] vma_alloc_folio_noprof+0xed/0x1d0 [ 425.070410][T12138] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 425.070448][T12138] ? rcu_read_unlock+0x2d/0xb0 [ 425.070490][T12138] ? rcu_read_unlock+0x2d/0xb0 [ 425.070541][T12138] do_wp_page+0x1ee1/0x4350 [ 425.070589][T12138] ? __pfx_do_wp_page+0x10/0x10 [ 425.070629][T12138] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.070673][T12138] __handle_mm_fault+0x1ab6/0x2a00 [ 425.070723][T12138] ? reacquire_held_locks+0xce/0x1e0 [ 425.070753][T12138] ? __pfx___handle_mm_fault+0x10/0x10 [ 425.070800][T12138] ? lock_vma_under_rcu+0x17c/0x590 [ 425.070864][T12138] handle_mm_fault+0x36d/0xa20 [ 425.070913][T12138] do_user_addr_fault+0x5a3/0x12f0 [ 425.070959][T12138] exc_page_fault+0x6f/0xd0 [ 425.071007][T12138] asm_exc_page_fault+0x26/0x30 [ 425.071035][T12138] RIP: 0033:0x7f8666b5cc45 [ 425.071058][T12138] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 425.071086][T12138] RSP: 002b:00007f8664df4de0 EFLAGS: 00010293 [ 425.071107][T12138] RAX: 0000000000000008 RBX: 00007f8667947e20 RCX: 0000000000000000 [ 425.071124][T12138] RDX: 0000000000000000 RSI: 00007f8666c4ff57 RDI: 00007f8667947e20 [ 425.071142][T12138] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 425.071159][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8666c4fd4d [ 425.071175][T12138] R13: ffffffffffffffe8 R14: 0000000000000009 R15: 00007f8666c4ff57 [ 425.071207][T12138] [ 425.373105][T12138] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 426.271160][ T8697] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 426.296789][ T8697] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 426.307906][ T8697] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 426.321347][ T8697] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 426.330311][ T8697] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 426.524091][ T5627] bridge0: port 3(syz_tun) entered disabled state [ 426.603769][ T8697] Bluetooth: hci9: command tx timeout [ 426.616672][ T5627] syz_tun (unregistering): left allmulticast mode [ 426.650530][ T5627] syz_tun (unregistering): left promiscuous mode [ 426.680473][ T5627] bridge0: port 3(syz_tun) entered disabled state [ 427.874811][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.884830][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.892129][T12130] bridge_slave_0: entered allmulticast mode [ 427.900947][T12130] bridge_slave_0: entered promiscuous mode [ 427.981032][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.997943][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.009565][T12130] bridge_slave_1: entered allmulticast mode [ 428.028726][T12130] bridge_slave_1: entered promiscuous mode [ 428.165297][T12130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.186349][T12130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.290252][T12130] team0: Port device team_slave_0 added [ 428.309554][T12130] team0: Port device team_slave_1 added [ 428.368732][T12130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.376617][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.403457][T12130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.427516][T12130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.434773][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.469906][ T8697] Bluetooth: hci10: command tx timeout [ 428.506839][T12130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.658500][T12130] hsr_slave_0: entered promiscuous mode [ 428.665851][T12130] hsr_slave_1: entered promiscuous mode [ 428.674608][T12130] debugfs: 'hsr0' already exists in 'hsr' [ 428.680491][T12130] Cannot create hsr debugfs directory [ 428.687300][ T8697] Bluetooth: hci9: command tx timeout [ 429.004805][T12190] FAULT_INJECTION: forcing a failure. [ 429.004805][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 429.044668][T12190] CPU: 1 UID: 0 PID: 12190 Comm: syz.4.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.044718][T12190] Tainted: [L]=SOFTLOCKUP [ 429.044729][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.044754][T12190] Call Trace: [ 429.044763][T12190] [ 429.044775][T12190] dump_stack_lvl+0x100/0x190 [ 429.044814][T12190] should_fail_ex.cold+0x5/0xa [ 429.044853][T12190] should_failslab+0xc2/0x120 [ 429.044888][T12190] __kmalloc_cache_noprof+0x7a/0x6f0 [ 429.044929][T12190] ? sctp_add_bind_addr+0xae/0x3e0 [ 429.044982][T12190] sctp_add_bind_addr+0xae/0x3e0 [ 429.045033][T12190] sctp_copy_local_addr_list+0x349/0x550 [ 429.045076][T12190] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 429.045113][T12190] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 429.045149][T12190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.045193][T12190] sctp_bind_addr_copy+0x331/0x530 [ 429.045230][T12190] sctp_connect_new_asoc+0x1c9/0x770 [ 429.045272][T12190] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 429.045318][T12190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.045364][T12190] sctp_sendmsg+0x1743/0x22e0 [ 429.045412][T12190] ? __pfx_sctp_sendmsg+0x10/0x10 [ 429.045449][T12190] ? __pfx_futex_wake_mark+0x10/0x10 [ 429.045492][T12190] ? aa_sk_perm+0x309/0xaa0 [ 429.045528][T12190] ? __pfx_aa_sk_perm+0x10/0x10 [ 429.045557][T12190] ? __might_fault+0xc5/0x140 [ 429.045611][T12190] ? __pfx_sctp_sendmsg+0x10/0x10 [ 429.045651][T12190] inet_sendmsg+0x11c/0x140 [ 429.045685][T12190] __sys_sendto+0x446/0x4b0 [ 429.045714][T12190] ? __pfx_inet_sendmsg+0x10/0x10 [ 429.045751][T12190] ? __pfx___sys_sendto+0x10/0x10 [ 429.045793][T12190] ? fd_install+0x223/0x580 [ 429.045841][T12190] ? xfd_validate_state+0x129/0x190 [ 429.045879][T12190] __x64_sys_sendto+0xe0/0x1c0 [ 429.045907][T12190] ? do_syscall_64+0x90/0xf80 [ 429.045949][T12190] ? lockdep_hardirqs_on+0x78/0x100 [ 429.045988][T12190] do_syscall_64+0x10b/0xf80 [ 429.046029][T12190] ? clear_bhb_loop+0x40/0x90 [ 429.046066][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.046097][T12190] RIP: 0033:0x7f8666b9ce59 [ 429.046122][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.046150][T12190] RSP: 002b:00007f8664df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.046179][T12190] RAX: ffffffffffffffda RBX: 00007f8666e16180 RCX: 00007f8666b9ce59 [ 429.046198][T12190] RDX: 000000000002000f RSI: 0000000000000000 RDI: 0000000000000003 [ 429.046216][T12190] RBP: 00007f8666c32d6f R08: 0000200000000000 R09: 000000000000001c [ 429.046235][T12190] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 429.046251][T12190] R13: 00007f8666e16218 R14: 00007f8666e16180 R15: 00007ffcf2652aa8 [ 429.046291][T12190] [ 429.886098][T12200] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[11318] was attempted by "CVRW+J[ne 0BF^X`(X+W*Fԝn/PbK\x5c릊˺YT 3Vx^pBfVHEWE3e]\x0c ke+^|m >W*;id_m\x0ciXF3-鋰WOиN^P^6^ ǮKwʔ7TU\x0c(m-K2Z9un;!H?/%* ]]FXwsU`}^FQ=]Eo#=f]XM/n<\x22oV&b7N\x0bUi}iK\x0a< `1c߳syТim_fKOM$d:UTc&\x1b.DY-\x07EUUL+a|].x}|׍VBQ-X2o1,^ɉFϝQ;|6WTF\x0caļeӁ0`lj^Ap#[FKsQأ̾gNaba;mho#О>bMR*,\x09໗W\x0d̫x[v\x0cG?+R\x0dqC.W c6ԇTCkH/LRO&\x0bOHBni\x1bn EQgeIt[v\x1b8@PWxGĎt-KKcVkf\x22lUq5PB?$\x5cXUr\x5cx552[ gmqDߡB&'(R?\x0bt\x22=5ÓӚJܢgFݥѫw-rhif6@t\x1b]\x09iGڂ)S=0bfg&MǙ_ [ 429.928956][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.131497][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.151580][T12153] bridge_slave_0: entered allmulticast mode [ 430.162037][T12153] bridge_slave_0: entered promiscuous mode [ 430.224931][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.241691][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.261604][T12153] bridge_slave_1: entered allmulticast mode [ 430.272515][T12153] bridge_slave_1: entered promiscuous mode [ 430.423218][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.444861][T12130] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 430.470777][T12130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.494349][T12130] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 430.521758][ T8697] Bluetooth: hci10: command tx timeout [ 430.534439][T12130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.551129][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.634412][T12130] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 430.658397][T12130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.671303][T12130] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 430.695463][T12130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.750838][T12153] team0: Port device team_slave_0 added [ 430.762750][ T8404] Bluetooth: hci9: command tx timeout [ 430.832944][T12153] team0: Port device team_slave_1 added [ 430.998284][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.026870][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.121636][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.196116][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.211869][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.238822][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.390004][T12153] hsr_slave_0: entered promiscuous mode [ 431.410947][T12153] hsr_slave_1: entered promiscuous mode [ 431.438379][T12153] debugfs: 'hsr0' already exists in 'hsr' [ 431.452289][T12153] Cannot create hsr debugfs directory [ 432.109941][T12153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.201493][T12130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.270277][T12130] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.356024][T12153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.413192][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.420453][ T9241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.484522][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.491696][ T9241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.602888][T12153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.602922][ T8404] Bluetooth: hci10: command tx timeout [ 432.814416][T12153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.843369][ T8404] Bluetooth: hci9: command tx timeout [ 433.363258][T12153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.379349][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.389981][T12153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 433.409945][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.419319][T12153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 433.431601][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.447096][T12153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 433.581795][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.880763][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.951577][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.972093][T12130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.102315][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.109544][ T9241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.189987][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.197194][ T9282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.684165][ T8404] Bluetooth: hci10: command tx timeout [ 434.942811][T12130] veth0_vlan: entered promiscuous mode [ 434.991475][T12130] veth1_vlan: entered promiscuous mode [ 435.119052][T12130] veth0_macvtap: entered promiscuous mode [ 435.159969][T12130] veth1_macvtap: entered promiscuous mode [ 435.255387][T12130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.349209][T12130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.382934][ T9282] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.420607][ T9282] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.433891][T12261] FAULT_INJECTION: forcing a failure. [ 435.433891][T12261] name fail_futex, interval 1, probability 0, space 0, times 0 [ 435.466314][ T9282] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.487245][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.8.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.487289][T12261] Tainted: [L]=SOFTLOCKUP [ 435.487299][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.487316][T12261] Call Trace: [ 435.487325][T12261] [ 435.487335][T12261] dump_stack_lvl+0x100/0x190 [ 435.487372][T12261] should_fail_ex.cold+0x5/0xa [ 435.487409][T12261] get_futex_key+0x1d2/0x1510 [ 435.487442][T12261] ? __pfx_get_futex_key+0x10/0x10 [ 435.487474][T12261] ? stack_trace_save+0x8e/0xc0 [ 435.487523][T12261] futex_wait_setup+0x83/0x510 [ 435.487570][T12261] __futex_wait+0x19f/0x300 [ 435.487610][T12261] ? __pfx___futex_wait+0x10/0x10 [ 435.487653][T12261] ? __pfx_futex_wake_mark+0x10/0x10 [ 435.487695][T12261] ? futex_hash+0x2ad/0x370 [ 435.487725][T12261] ? futex_hash+0x141/0x370 [ 435.487756][T12261] futex_wait+0xe6/0x370 [ 435.487794][T12261] ? __pfx_futex_wait+0x10/0x10 [ 435.487840][T12261] ? errseq_sample+0x51/0x70 [ 435.487935][T12261] ? file_init_path+0x48e/0x670 [ 435.487981][T12261] do_futex+0x1ef/0x350 [ 435.488014][T12261] ? __pfx_do_futex+0x10/0x10 [ 435.488045][T12261] ? fd_install+0x223/0x580 [ 435.488085][T12261] __x64_sys_futex+0x34f/0x4d0 [ 435.488119][T12261] ? __sys_socket+0xac/0x260 [ 435.488161][T12261] ? __pfx___x64_sys_futex+0x10/0x10 [ 435.488208][T12261] ? rcu_is_watching+0x12/0xc0 [ 435.488248][T12261] do_syscall_64+0x10b/0xf80 [ 435.488290][T12261] ? clear_bhb_loop+0x40/0x90 [ 435.488324][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.488354][T12261] RIP: 0033:0x7f3fea79ce59 [ 435.488377][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.488409][T12261] RSP: 002b:00007f3feb6510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 435.488436][T12261] RAX: ffffffffffffffda RBX: 00007f3feaa15fa8 RCX: 00007f3fea79ce59 [ 435.488454][T12261] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3feaa15fa8 [ 435.488471][T12261] RBP: 00007f3feaa15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 435.488488][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.488505][T12261] R13: 00007f3feaa16038 R14: 00007fff41e961a0 R15: 00007fff41e96288 [ 435.488543][T12261] [ 436.107800][ T9301] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.123010][T12153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.609072][ T9308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.635094][T12153] veth0_vlan: entered promiscuous mode [ 436.636315][ T9308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.782423][T12153] veth1_vlan: entered promiscuous mode [ 436.901884][T12268] Process accounting paused [ 437.016118][ T9301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.055250][ T9301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.235716][T12153] veth0_macvtap: entered promiscuous mode [ 437.302173][T12153] veth1_macvtap: entered promiscuous mode [ 437.344425][T12153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.404463][T12153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.521128][ T9241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.554678][ T9241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.582583][ T9241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.800449][ T9241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.238291][ T9241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.255759][ T9241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.884194][ T9299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.906284][ T9299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.001705][T12311] program syz.8.1355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.133395][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.141415][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.010055][T12325] FAULT_INJECTION: forcing a failure. [ 441.010055][T12325] name failslab, interval 1, probability 0, space 0, times 0 [ 441.022995][T12325] CPU: 0 UID: 0 PID: 12325 Comm: syz.8.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.023038][T12325] Tainted: [L]=SOFTLOCKUP [ 441.023048][T12325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.023065][T12325] Call Trace: [ 441.023073][T12325] [ 441.023084][T12325] dump_stack_lvl+0x100/0x190 [ 441.023121][T12325] should_fail_ex.cold+0x5/0xa [ 441.023158][T12325] should_failslab+0xc2/0x120 [ 441.023191][T12325] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 441.023234][T12325] ? vm_area_alloc+0x1f/0x160 [ 441.023288][T12325] vm_area_alloc+0x1f/0x160 [ 441.023326][T12325] __mmap_region+0x104d/0x2da0 [ 441.023376][T12325] ? __pfx___mmap_region+0x10/0x10 [ 441.023424][T12325] ? post_alloc_hook+0x140/0x170 [ 441.023464][T12325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.023519][T12325] ? mas_prev_node+0x1da/0xf00 [ 441.023641][T12325] ? mas_prev_slot+0x760/0x1d20 [ 441.023687][T12325] ? __pfx_mas_prev+0x10/0x10 [ 441.023734][T12325] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 441.023826][T12325] mmap_region+0x35d/0x620 [ 441.023858][T12325] ? __pfx_mmap_region+0x10/0x10 [ 441.023886][T12325] ? thp_get_unmapped_area_vmflags+0x27f/0x2d0 [ 441.023928][T12325] ? cap_mmap_addr+0x4b/0x120 [ 441.023969][T12325] ? bpf_lsm_mmap_addr+0x9/0x30 [ 441.023997][T12325] ? security_mmap_addr+0x71/0x1e0 [ 441.024030][T12325] ? __get_unmapped_area+0x255/0x3e0 [ 441.024070][T12325] do_mmap+0xc63/0x12f0 [ 441.024112][T12325] ? __pfx_do_mmap+0x10/0x10 [ 441.024147][T12325] ? __pfx_down_write_killable+0x10/0x10 [ 441.024186][T12325] vm_mmap_pgoff+0x29e/0x470 [ 441.024229][T12325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 441.024279][T12325] ? find_held_lock+0x2b/0x80 [ 441.024317][T12325] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 441.024357][T12325] ksys_mmap_pgoff+0xe4/0x610 [ 441.024393][T12325] ? find_held_lock+0x2b/0x80 [ 441.024430][T12325] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 441.024463][T12325] ? exc_page_fault+0x6f/0xd0 [ 441.024513][T12325] __x64_sys_mmap+0x125/0x190 [ 441.024549][T12325] do_syscall_64+0x10b/0xf80 [ 441.024589][T12325] ? clear_bhb_loop+0x40/0x90 [ 441.024623][T12325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.024653][T12325] RIP: 0033:0x7f3fea79cbc2 [ 441.024676][T12325] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 441.024703][T12325] RSP: 002b:00007f3feb60dd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 441.024729][T12325] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fea79cbc2 [ 441.024748][T12325] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 441.024765][T12325] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 441.024782][T12325] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 441.024799][T12325] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f3fea84ff57 [ 441.024837][T12325] [ 441.323454][T12331] ubi0: attaching mtd0 [ 441.329061][T12331] ubi0: scanning is finished [ 441.333815][T12331] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 441.828344][T12331] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 442.330160][T12349] random: crng reseeded on system resumption [ 443.071229][T12355] zswap: compressor not available [ 445.766124][T12384] FAULT_INJECTION: forcing a failure. [ 445.766124][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 445.781270][T12384] CPU: 0 UID: 0 PID: 12384 Comm: syz.9.1371 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.781316][T12384] Tainted: [L]=SOFTLOCKUP [ 445.781325][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.781342][T12384] Call Trace: [ 445.781351][T12384] [ 445.781362][T12384] dump_stack_lvl+0x100/0x190 [ 445.781398][T12384] should_fail_ex.cold+0x5/0xa [ 445.781433][T12384] should_failslab+0xc2/0x120 [ 445.781466][T12384] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 445.781494][T12384] ? __alloc_skb+0x140/0x710 [ 445.781594][T12384] ? __alloc_skb+0x5b7/0x710 [ 445.781625][T12384] __alloc_skb+0x140/0x710 [ 445.781651][T12384] ? __alloc_skb+0x5b7/0x710 [ 445.781676][T12384] ? __pfx___alloc_skb+0x10/0x10 [ 445.781712][T12384] netlink_alloc_large_skb+0x69/0x150 [ 445.781752][T12384] netlink_sendmsg+0x680/0xda0 [ 445.781803][T12384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.781845][T12384] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 445.781891][T12384] __sys_sendto+0x468/0x4b0 [ 445.781917][T12384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.781956][T12384] ? __pfx___sys_sendto+0x10/0x10 [ 445.781995][T12384] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 445.782027][T12384] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 445.782085][T12384] __x64_sys_sendto+0xe0/0x1c0 [ 445.782113][T12384] ? do_syscall_64+0x90/0xf80 [ 445.782155][T12384] ? lockdep_hardirqs_on+0x78/0x100 [ 445.782194][T12384] do_syscall_64+0x10b/0xf80 [ 445.782234][T12384] ? clear_bhb_loop+0x40/0x90 [ 445.782269][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.782298][T12384] RIP: 0033:0x7f99a3f5d68e [ 445.782321][T12384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.782349][T12384] RSP: 002b:00007f99a4efbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.782376][T12384] RAX: ffffffffffffffda RBX: 00007f99a4efd6c0 RCX: 00007f99a3f5d68e [ 445.782396][T12384] RDX: 0000000000000020 RSI: 00007f99a4efc000 RDI: 0000000000000004 [ 445.782414][T12384] RBP: 0000000000000000 R08: 00007f99a4efbf04 R09: 000000000000000c [ 445.782431][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 445.782449][T12384] R13: 00007f99a4efbf58 R14: 00007f99a4efc000 R15: 0000000000000000 [ 445.782484][T12384] [ 447.165870][T12381] Bluetooth: hci10: unexpected subevent 0x01 length: 123 > 18 [ 447.335218][T12381] Bluetooth: hci5: command 0x0406 tx timeout [ 448.040090][T12402] blktrace: Concurrent blktraces are not allowed on sg0 [ 449.251077][ T8407] Bluetooth: hci10: command 0x2016 tx timeout [ 449.846624][T12418] can0: slcan on pty238. [ 450.144455][T12417] can0 (unregistered): slcan off pty238. [ 450.178267][ T29] audit: type=1800 audit(1778817606.971:15): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1381" name="dbroot" dev="configfs" ino=46410 res=0 errno=0 [ 450.935672][ T8404] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 451.264824][T12443] FAULT_INJECTION: forcing a failure. [ 451.264824][T12443] name failslab, interval 1, probability 0, space 0, times 0 [ 451.324676][T12443] CPU: 1 UID: 0 PID: 12443 Comm: syz.1.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.324721][T12443] Tainted: [L]=SOFTLOCKUP [ 451.324731][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.324748][T12443] Call Trace: [ 451.324757][T12443] [ 451.324767][T12443] dump_stack_lvl+0x100/0x190 [ 451.324806][T12443] should_fail_ex.cold+0x5/0xa [ 451.324850][T12443] should_failslab+0xc2/0x120 [ 451.324885][T12443] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 451.324914][T12443] ? __alloc_skb+0x140/0x710 [ 451.324941][T12443] ? __alloc_skb+0x5b7/0x710 [ 451.324976][T12443] __alloc_skb+0x140/0x710 [ 451.325003][T12443] ? __alloc_skb+0x5b7/0x710 [ 451.325032][T12443] ? __pfx___alloc_skb+0x10/0x10 [ 451.325077][T12443] netlink_alloc_large_skb+0x69/0x150 [ 451.325120][T12443] netlink_sendmsg+0x680/0xda0 [ 451.325168][T12443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.325211][T12443] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 451.325258][T12443] __sys_sendto+0x468/0x4b0 [ 451.325282][T12443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.325319][T12443] ? __pfx___sys_sendto+0x10/0x10 [ 451.325354][T12443] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 451.325384][T12443] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 451.325435][T12443] __x64_sys_sendto+0xe0/0x1c0 [ 451.325461][T12443] ? do_syscall_64+0x90/0xf80 [ 451.325497][T12443] ? lockdep_hardirqs_on+0x78/0x100 [ 451.325534][T12443] do_syscall_64+0x10b/0xf80 [ 451.325570][T12443] ? clear_bhb_loop+0x40/0x90 [ 451.325602][T12443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.325628][T12443] RIP: 0033:0x7fd16835d68e [ 451.325648][T12443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.325672][T12443] RSP: 002b:00007fd16924ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 451.325696][T12443] RAX: ffffffffffffffda RBX: 00007fd16924e6c0 RCX: 00007fd16835d68e [ 451.325714][T12443] RDX: 0000000000000020 RSI: 00007fd16924d000 RDI: 0000000000000004 [ 451.325730][T12443] RBP: 0000000000000000 R08: 00007fd16924cf04 R09: 000000000000000c [ 451.325746][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 451.325761][T12443] R13: 00007fd16924cf58 R14: 00007fd16924d000 R15: 0000000000000000 [ 451.325794][T12443] [ 451.346196][ T8404] Bluetooth: hci10: command 0x2016 tx timeout [ 453.095225][ T8407] Bluetooth: hci9: command 0x2016 tx timeout [ 453.516945][ T29] audit: type=1800 audit(1778817610.309:16): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1386" name="dbroot" dev="configfs" ino=45761 res=0 errno=0 [ 454.069341][T12493] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 454.693774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 454.889507][T12502] vhci_hcd vhci_hcd.1: invalid port number 47 [ 454.913134][T12502] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 455.174234][ T8407] Bluetooth: hci9: command 0x2016 tx timeout [ 456.141308][T12516] FAULT_INJECTION: forcing a failure. [ 456.141308][T12516] name failslab, interval 1, probability 0, space 0, times 0 [ 456.175175][T12516] CPU: 0 UID: 0 PID: 12516 Comm: syz.8.1392 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.175217][T12516] Tainted: [L]=SOFTLOCKUP [ 456.175226][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.175244][T12516] Call Trace: [ 456.175252][T12516] [ 456.175262][T12516] dump_stack_lvl+0x100/0x190 [ 456.175297][T12516] should_fail_ex.cold+0x5/0xa [ 456.175348][T12516] should_failslab+0xc2/0x120 [ 456.175382][T12516] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 456.175449][T12516] ? vm_area_alloc+0x1f/0x160 [ 456.175497][T12516] vm_area_alloc+0x1f/0x160 [ 456.175538][T12516] __mmap_region+0x104d/0x2da0 [ 456.175587][T12516] ? __pfx___mmap_region+0x10/0x10 [ 456.175636][T12516] ? post_alloc_hook+0x140/0x170 [ 456.175679][T12516] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.175729][T12516] ? mas_prev_node+0x1da/0xf00 [ 456.175782][T12516] ? mas_prev_slot+0x760/0x1d20 [ 456.175828][T12516] ? __pfx_mas_prev+0x10/0x10 [ 456.175874][T12516] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 456.175965][T12516] mmap_region+0x35d/0x620 [ 456.175997][T12516] ? __pfx_mmap_region+0x10/0x10 [ 456.176025][T12516] ? thp_get_unmapped_area_vmflags+0x27f/0x2d0 [ 456.176067][T12516] ? cap_mmap_addr+0x4b/0x120 [ 456.176108][T12516] ? bpf_lsm_mmap_addr+0x9/0x30 [ 456.176136][T12516] ? security_mmap_addr+0x71/0x1e0 [ 456.176169][T12516] ? __get_unmapped_area+0x255/0x3e0 [ 456.176209][T12516] do_mmap+0xc63/0x12f0 [ 456.176251][T12516] ? __pfx_do_mmap+0x10/0x10 [ 456.176286][T12516] ? __pfx_down_write_killable+0x10/0x10 [ 456.176323][T12516] vm_mmap_pgoff+0x29e/0x470 [ 456.176366][T12516] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 456.176417][T12516] ? find_held_lock+0x2b/0x80 [ 456.176454][T12516] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 456.176495][T12516] ksys_mmap_pgoff+0xe4/0x610 [ 456.176531][T12516] ? find_held_lock+0x2b/0x80 [ 456.176567][T12516] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 456.176602][T12516] ? exc_page_fault+0x6f/0xd0 [ 456.176651][T12516] __x64_sys_mmap+0x125/0x190 [ 456.176688][T12516] do_syscall_64+0x10b/0xf80 [ 456.176728][T12516] ? clear_bhb_loop+0x40/0x90 [ 456.176763][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.176792][T12516] RIP: 0033:0x7f3fea79cbc2 [ 456.176816][T12516] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 456.176842][T12516] RSP: 002b:00007f3feb60dd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 456.176869][T12516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fea79cbc2 [ 456.176888][T12516] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 456.176905][T12516] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 456.176922][T12516] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 456.176939][T12516] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f3fea84ff57 [ 456.176975][T12516] [ 457.934231][T12535] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 458.077438][ T29] audit: type=1800 audit(1778817614.867:17): pid=12537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1395" name="dbroot" dev="configfs" ino=46587 res=0 errno=0 [ 459.262518][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1397'. [ 459.600928][ T8407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.615665][ T8407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.632162][ T8407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.650932][ T8407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.674833][ T8407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.934403][ T29] audit: type=1800 audit(1778817616.706:18): pid=12564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1400" name="dbroot" dev="configfs" ino=46679 res=0 errno=0 [ 461.262650][ T30] INFO: task syz-executor:5626 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.305531][ T30] Tainted: G L syzkaller #0 [ 461.349278][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.408347][ T30] task:syz-executor state:D stack:23592 pid:5626 tgid:5626 ppid:1 task_flags:0x400140 flags:0x00080002 [ 461.479862][ T30] Call Trace: [ 461.501321][ T30] [ 461.516065][ T30] __schedule+0x1295/0x67a0 [ 461.539913][ T30] ? __pfx___schedule+0x10/0x10 [ 461.573178][ T30] ? find_held_lock+0x2b/0x80 [ 461.606147][ T30] ? schedule+0x2bf/0x390 [ 461.634023][ T30] schedule+0xdd/0x390 [ 461.654510][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.688572][ T30] __mutex_lock+0xced/0x1b10 [ 461.713901][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 461.746706][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 461.767879][ T30] ? net_generic+0xea/0x2a0 [ 461.787610][ T30] ? net_generic+0xea/0x2a0 [ 461.806509][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 461.817380][ T8407] Bluetooth: hci1: command tx timeout [ 461.839422][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 461.868381][ T30] nfsd_umount+0x3b/0x60 [ 461.892604][ T30] deactivate_locked_super+0xc1/0x1b0 [ 461.918735][ T30] deactivate_super+0xe7/0x110 [ 461.938616][ T30] cleanup_mnt+0x21f/0x450 [ 461.985885][ T30] task_work_run+0x150/0x240 [ 462.013265][ T30] ? __pfx_task_work_run+0x10/0x10 [ 462.042798][ T30] ? rcu_is_watching+0x12/0xc0 [ 462.074769][ T30] exit_to_user_mode_loop+0x107/0x4f0 [ 462.104501][ T30] ? rcu_is_watching+0x12/0xc0 [ 462.131978][ T30] do_syscall_64+0x6f2/0xf80 [ 462.160295][ T30] ? clear_bhb_loop+0x40/0x90 [ 462.191342][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.221410][ T30] RIP: 0033:0x7f3a47d9e097 [ 462.240203][ T30] RSP: 002b:00007ffe18d7b398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 462.269376][ T30] RAX: 0000000000000000 RBX: 00007f3a47e321ca RCX: 00007f3a47d9e097 [ 462.300798][ T30] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffe18d7c4e0 [ 462.329240][ T30] RBP: 00007ffe18d7c4cc R08: 0000000000000000 R09: 0000000000000000 [ 462.361771][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe18d7c4e0 [ 462.385246][ T30] R13: 00007f3a47e321ca R14: 000000000004b7cf R15: 00007ffe18d7c520 [ 462.408514][ T30] [ 462.419679][ T30] [ 462.419679][ T30] Showing all locks held in the system: [ 462.452364][ T30] 1 lock held by khungtaskd/30: [ 462.474685][ T30] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 462.535111][ T30] 2 locks held by syz-executor/5626: [ 462.568638][ T30] #0: ffff88802ae240d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 462.607185][ T30] #1: ffffffff8ec61da0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 462.639521][ T30] 2 locks held by syz-executor/5628: [ 462.655587][ T30] #0: ffff8880591960d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 462.707618][ T30] #1: ffffffff8ec61da0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 462.737884][ T30] 3 locks held by kworker/u10:7/9241: [ 462.743530][ T30] #0: ffff88813fe9c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 462.782476][ T30] #1: ffffc90003a97d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 462.807789][ T30] #2: ffffffff9060f460 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 462.827677][ T30] 5 locks held by kworker/u10:23/9289: [ 462.837917][ T30] #0: ffff88801c6ae140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 462.861955][ T30] #1: ffffc90003c3fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 462.899592][ T30] #2: ffffffff905f6728 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 462.919262][ T30] #3: ffffffff9060f460 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 462.949769][ T30] #4: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 462.993259][ T30] 2 locks held by kworker/u10:31/9301: [ 463.011321][ T30] #0: ffff88801efad940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 463.037946][ T30] #1: ffffc9000428fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 463.077919][ T30] 4 locks held by kworker/u10:38/9308: [ 463.099081][ T30] 2 locks held by syz.1.812/9455: [ 463.104169][ T30] #0: ffffffff906bd948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 463.127838][ T30] #1: ffffffff8ec61da0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 463.140135][ T30] 2 locks held by syz-executor/9811: [ 463.150923][ T30] #0: ffff888037fb20d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.177915][ T30] #1: ffffffff8ec61da0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.193841][ T30] 2 locks held by syz-executor/10350: [ 463.208087][ T30] #0: ffff88803a2b20d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.228521][ T30] #1: ffffffff8ec61da0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.258395][ T30] 2 locks held by syz-executor/10627: [ 463.270771][ T30] #0: ffff88807d3c20d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.298000][ T30] #1: ffffffff8ec61da0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.318133][ T30] 2 locks held by syz.7.1112/10974: [ 463.324857][ T30] #0: ffffffff906bd948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 463.343659][ T30] #1: ffffffff8ec61da0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 463.368018][ T30] 3 locks held by syz-executor/11318: [ 463.378282][ T30] #0: ffff8880596f0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.397976][ T30] #1: ffff8880596f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 463.408641][ T30] #2: ffffffff908960e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 463.420007][ T30] 1 lock held by syz.2.1296/11971: [ 463.425233][ T30] 4 locks held by syz-executor/12130: [ 463.431103][ T30] #0: ffff888078fccea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.441169][ T30] #1: ffff888078fcc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 463.452010][ T30] #2: ffffffff908960e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 463.462398][ T30] #3: ffff88807abc92f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 463.472225][ T30] 3 locks held by syz-executor/12153: [ 463.477633][ T30] #0: ffff888060664ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.487728][ T30] #1: ffff8880606640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 463.497787][ T30] #2: ffffffff908960e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 463.508653][ T30] 3 locks held by syz-executor/12555: [ 463.514063][ T30] #0: ffff88805b6ccea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.524189][ T30] #1: ffff88805b6cc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 463.534215][ T30] #2: ffffffff908960e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 463.544635][ T30] 3 locks held by syz.8.1403/12580: [ 463.550631][ T30] [ 463.554075][ T30] ============================================= [ 463.554075][ T30] [ 463.588187][ T30] NMI backtrace for cpu 1 [ 463.588211][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 463.588248][ T30] Tainted: [L]=SOFTLOCKUP [ 463.588257][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.588272][ T30] Call Trace: [ 463.588281][ T30] [ 463.588291][ T30] dump_stack_lvl+0x100/0x190 [ 463.588325][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 463.588358][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.588388][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 463.588424][ T30] sys_info+0x141/0x190 [ 463.588450][ T30] watchdog+0xcb1/0x1030 [ 463.588495][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 463.588532][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.588571][ T30] ? __kthread_parkme+0x18c/0x230 [ 463.588611][ T30] ? kthread+0x13a/0x450 [ 463.588633][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.588668][ T30] kthread+0x370/0x450 [ 463.588691][ T30] ? __pfx_kthread+0x10/0x10 [ 463.588718][ T30] ret_from_fork+0x72b/0xd50 [ 463.588756][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 463.588787][ T30] ? __switch_to+0x800/0x1100 [ 463.588822][ T30] ? __switch_to_asm+0x39/0x70 [ 463.588856][ T30] ? __pfx_kthread+0x10/0x10 [ 463.588882][ T30] ret_from_fork_asm+0x1a/0x30 [ 463.588933][ T30] [ 463.588947][ T30] Sending NMI from CPU 1 to CPUs 0: [ 463.731032][ C0] NMI backtrace for cpu 0 [ 463.731054][ C0] CPU: 0 UID: 0 PID: 12580 Comm: syz.8.1403 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.731088][ C0] Tainted: [L]=SOFTLOCKUP [ 463.731097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.731110][ C0] RIP: 0010:get_mem_cgroup_from_mm+0x297/0x5e0 [ 463.731139][ C0] Code: 5a 85 c0 75 2f 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 bf 02 00 00 48 8b 43 10 a8 03 0f 85 9c 00 00 00 65 48 ff 00 54 87 ff ff e9 6d fe ff ff e8 0a ee 6e ff 84 c0 75 c8 e8 11 a4 [ 463.731162][ C0] RSP: 0018:ffffc90004b96b48 EFLAGS: 00000286 [ 463.731181][ C0] RAX: 0000607edb945bb0 RBX: ffff88801cafee00 RCX: 0000000000000003 [ 463.731197][ C0] RDX: 0000000000000000 RSI: ffffffff8c1c3780 RDI: ffff88801cafee10 [ 463.731213][ C0] RBP: dffffc0000000000 R08: 000000005c001677 R09: 0000000000000007 [ 463.731228][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88803892bd40 [ 463.731243][ C0] R13: ffffed10071258f6 R14: ffffffff827d7bb9 R15: ffff88807d02f800 [ 463.731259][ C0] FS: 00007f3feb6516c0(0000) GS:ffff888124377000(0000) knlGS:0000000000000000 [ 463.731282][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.731297][ C0] CR2: 000055aa4f5a6ee8 CR3: 0000000076236000 CR4: 00000000003526f0 [ 463.731313][ C0] Call Trace: [ 463.731320][ C0] [ 463.731331][ C0] __mem_cgroup_charge+0x1a/0x1c0 [ 463.731362][ C0] shmem_alloc_and_add_folio+0x451/0xd40 [ 463.731404][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 463.731442][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 463.731470][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 463.731496][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 463.731523][ C0] shmem_write_begin+0x1a4/0x420 [ 463.731548][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 463.731572][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 463.731602][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 463.731638][ C0] generic_perform_write+0x292/0xa40 [ 463.731676][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 463.731712][ C0] ? file_update_time_flags+0x373/0x500 [ 463.731747][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 463.731775][ C0] shmem_file_write_iter+0x10e/0x140 [ 463.731804][ C0] __kernel_write_iter+0x2ac/0x920 [ 463.731832][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 463.731864][ C0] ? __up_read+0x2c1/0x6e0 [ 463.731892][ C0] ? dump_user_range+0x65e/0xad0 [ 463.731928][ C0] dump_user_range+0x3f9/0xad0 [ 463.731964][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 463.732002][ C0] ? __pfx_writenote+0x10/0x10 [ 463.732038][ C0] elf_core_dump+0x2d5f/0x3d10 [ 463.732081][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 463.732115][ C0] ? kasan_save_stack+0x3f/0x50 [ 463.732137][ C0] ? kasan_save_stack+0x30/0x50 [ 463.732159][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 463.732180][ C0] ? __kvmalloc_node_noprof+0x360/0xa00 [ 463.732204][ C0] ? vfs_coredump+0x22db/0x5770 [ 463.732236][ C0] ? asm_exc_page_fault+0x26/0x30 [ 463.732261][ C0] ? 0xffffffffff600000 [ 463.732303][ C0] ? vfs_coredump+0x29a0/0x5770 [ 463.732333][ C0] vfs_coredump+0x29a0/0x5770 [ 463.732371][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 463.732404][ C0] ? __lock_acquire+0x4a5/0x2630 [ 463.732432][ C0] ? lock_acquire+0x1b1/0x370 [ 463.732460][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 463.732492][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 463.732519][ C0] ? __kernel_text_address+0xd/0x30 [ 463.732543][ C0] ? unwind_get_return_address+0x59/0xa0 [ 463.732574][ C0] ? arch_stack_walk+0xa6/0xf0 [ 463.732608][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 463.732641][ C0] ? stack_trace_save+0x8e/0xc0 [ 463.732673][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 463.732704][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 463.732732][ C0] ? __lock_acquire+0x4a5/0x2630 [ 463.732779][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 463.732892][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 463.732930][ C0] ? rcu_is_watching+0x12/0xc0 [ 463.732960][ C0] get_signal+0x2162/0x2210 [ 463.732994][ C0] ? __pfx_get_signal+0x10/0x10 [ 463.733023][ C0] ? find_held_lock+0x2b/0x80 [ 463.733051][ C0] ? bad_area_access_error+0xab/0x1d0 [ 463.733078][ C0] ? fixup_vdso_exception+0x2d1/0x370 [ 463.733113][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 463.733149][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.733189][ C0] ? rcu_is_watching+0x12/0xc0 [ 463.733218][ C0] irqentry_exit+0x410/0x7e0 [ 463.733253][ C0] asm_exc_page_fault+0x26/0x30 [ 463.733275][ C0] RIP: 0033:0x0 [ 463.733289][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 463.733301][ C0] RSP: 002b:000000000000000b EFLAGS: 00010217 [ 463.733318][ C0] RAX: 0000000000000000 RBX: 00007f3feaa15fa0 RCX: 00007f3fea79ce59 [ 463.733333][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000020003b46 [ 463.733347][ C0] RBP: 00007f3fea832d6f R08: fffffffffffffffe R09: 0000000000000000 [ 463.733362][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.733376][ C0] R13: 00007f3feaa16038 R14: 00007f3feaa15fa0 R15: 00007fff41e96288 [ 463.733400][ C0] [ 463.899797][ T8407] Bluetooth: hci1: command tx timeout [ 463.909414][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 463.909441][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 463.909480][ T30] Tainted: [L]=SOFTLOCKUP [ 463.909490][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.909506][ T30] Call Trace: [ 463.909516][ T30] [ 463.909527][ T30] dump_stack_lvl+0x100/0x190 [ 463.909562][ T30] vpanic+0x552/0x970 [ 463.909589][ T30] ? __pfx_vpanic+0x10/0x10 [ 463.909615][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 463.909658][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 463.909694][ T30] panic+0xd1/0xe0 [ 463.909719][ T30] ? __pfx_panic+0x10/0x10 [ 463.909750][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 463.909780][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 463.909812][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 463.909843][ T30] ? watchdog.cold+0x1ec/0x234 [ 463.909872][ T30] ? watchdog+0xcc1/0x1030 [ 463.909911][ T30] watchdog.cold+0x1fd/0x234 [ 463.909947][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 463.909985][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.910024][ T30] ? __kthread_parkme+0x18c/0x230 [ 463.910063][ T30] ? kthread+0x13a/0x450 [ 463.910085][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.910120][ T30] kthread+0x370/0x450 [ 463.910144][ T30] ? __pfx_kthread+0x10/0x10 [ 463.910170][ T30] ret_from_fork+0x72b/0xd50 [ 463.910201][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 463.910233][ T30] ? __switch_to+0x800/0x1100 [ 463.910269][ T30] ? __switch_to_asm+0x39/0x70 [ 463.910303][ T30] ? __pfx_kthread+0x10/0x10 [ 463.910330][ T30] ret_from_fork_asm+0x1a/0x30 [ 463.910380][ T30] [ 463.911997][ T30] Kernel Offset: disabled