last executing test programs: 2m35.828362542s ago: executing program 1 (id=2434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @pid}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 2m35.59733687s ago: executing program 1 (id=2435): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7ff, 0x3, 0x2, 0x9, 0xfffffffe, 0x4000006, 0x4, 0xb6, 0x8000000000b, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000, 0x0, 0xffffffffffffffae, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m35.184145412s ago: executing program 1 (id=2438): unshare$auto(0x40000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) (async) unshare$auto(0x40000080) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) (async) socket(0x11, 0x5, 0x100) (async) r1 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy3/hwsim/ps\x00', 0x8900, 0x0) read$auto_hwsim_fops_ps_(r1, 0x0, 0x0) (async) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1001, 0x0, 0xb74, 0x66a) pwrite64$auto(r1, 0x0, 0x8, 0x4) (async) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40444c0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x1, 0x400000083, 0x12, r2, 0xe) socket(0x9, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r3 = socket(0x1d, 0x0, 0x106) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) unshare$auto(0xa) (async) r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x652a00, 0x0) ioctl$auto_XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f00000000c0)={0x9, 0xea000000, 0x3, 0xfffffff9, 0x800}) setsockopt$auto(r3, 0x9, 0x1e, 0x0, 0x7) (async) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x40, 0x2020000, 0x66) madvise$auto(0x0, 0x8, 0x3) (async) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) (async) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) close$auto(r5) 2m33.517908157s ago: executing program 1 (id=2446): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/wg0/igmpv3_unsolicited_report_interval\x00', 0x1a000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) add_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000001240)='.)},]+o)@}/^p,/\x00', 0x0, 0x0, 0x3, 0xfffffffffffffffa) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x4ffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0) read$auto(r0, 0x0, 0x1ff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0x311) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x4000000000, 0x40000b, 0x7, 0x9b72, 0x2, 0xf) mincore$auto(0x1000, 0x4000000, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x10000, &(0x7f0000000000)="e6d8d30178a5e9d1be559355800f2a0c25cb0d3bf4fd8c94675cd8") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) 2m32.789113689s ago: executing program 0 (id=2450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @pid}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 2m32.771813184s ago: executing program 1 (id=2451): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@hci={0x1f, 0x2, 0x1}, 0x51) r1 = fcntl$auto(0x3, 0x4, 0xa553) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket(0x11, 0x3, 0x80000009) sendmmsg$auto(r1, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b0000040088fb", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0xfffffffe}, 0x10002, 0x100) r2 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x206a02, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) ioctl$auto_TCSBRK2(0xffffffffffffffff, 0x5409, &(0x7f0000000180)="77579da420441caed830544e706d0851d383773aa96595cb6ec38858fb1bfeea25784133db5f2a149e719a60758ffdce075c69caf27d8b67c07cc65bf146e57a80cb515b90b62e3f3b0b42885d82d4a115c0") brk$auto(0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xab, 0xdf, 0xeb1, r3, 0x8000) setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m32.551065379s ago: executing program 0 (id=2452): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c7, 0x1e2) listen$auto(r0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d4}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x0, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='\adev/audio\x921\r$D\xa8g\xe8$n\xeep\xd9\xdbU\x87M\xe3}\x1a\xdf\xec\x94Y\xc3\xcf\xb0\xa4\x90\xdat\x16\x03\xf16\x16W\xff\x03\xd2^\x00p\xb3\xfc\x9e&FZ\x1b\aFr\xc6\x92', 0x2) write$auto(r3, 0x0, 0x8) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, r2, 0x1, 0x402f, 0x8, 0x5, 0xffffffffffffffff, 0x200000002e, 0x7ff}, 0x6f5) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x1, 0xffffffffffff0008, 0x19) msgctl$auto_IPC_INFO(0xa94, 0x3, 0x0) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) 2m31.8508633s ago: executing program 0 (id=2455): getsockopt$auto_SO_LOCK_FILTER(0xffffffffffffffff, 0x3, 0x2c, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0xd3) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r0, 0x83, &(0x7f00000000c0)='\x00', &(0x7f0000000100)="4165dc7ef066c541a7485a3577d964eeaef341435925871d3e951bc7b3d27e1e9fc48cfb0c8619089c7a42001b1283851fd6832ae6970a138ef9caa1df489418f1778b8fa0b2690bb9ddd14046ff87687daf085dbb965f14297915c710a8bc6faa7203ba8050", 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x10000000, &(0x7f0000000180)="c67fc944d1c504531145cb14938b2f820c2d693d6a61baf65a6e4c5cbc945f04c1c3b46507f727128694f86b0a2e5d53d892d4b842c1909f921d961fbc4f440863952afa9ea77a048bac3f0d8f327a81a26f74dfafeb360cd4547a676db5ab8bfd8f9531c97822ea0df21f38dee1c50c41f346eacf58438f73dc1674bff1a2a6a0bd7da69da17e35ee54334e263c42b6d98561f44d338e34", 0x98, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="bda54535678a509d69e031b92bd684b451") (async) r2 = syz_clone(0x10000000, &(0x7f0000000180)="c67fc944d1c504531145cb14938b2f820c2d693d6a61baf65a6e4c5cbc945f04c1c3b46507f727128694f86b0a2e5d53d892d4b842c1909f921d961fbc4f440863952afa9ea77a048bac3f0d8f327a81a26f74dfafeb360cd4547a676db5ab8bfd8f9531c97822ea0df21f38dee1c50c41f346eacf58438f73dc1674bff1a2a6a0bd7da69da17e35ee54334e263c42b6d98561f44d338e34", 0x98, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="bda54535678a509d69e031b92bd684b451") shmctl$auto_SHM_UNLOCK(0x5, 0xc, &(0x7f0000000440)={{0x6, 0xee00, 0x0, 0x22, 0x0, 0x1, 0xe000}, 0x4, 0x5, 0x8, 0x7, @raw=0x40, @raw=0xc, 0x0, 0x0, &(0x7f0000000300)="cadacf146888e6679dc1bf47487c2cf4dc3a28ad6b220e48d51916bb7c5b3b287bce81159d14df441b0bef6ac05d3b92b047468a8ef3041c5f2b8f572b8671045fb01bdbd2b7b88cf048294b7453e8ad15abbb10d0d7fbc136eb96fd43d9", &(0x7f0000000380)="4ff10385859d757dd85c8e71a76c9caa1c54df7edda88d9cc11f66577d0996c190f38c40a8f7ae15f6871c56b3075adf303332cc3c6c23e88332365e51b5356e03901201873fe40b8155d15799bc9c43141e912fb8ce76abea6d57bb79364418fc6413f2360e961c0ae59915035769f66fcc6741d95b3a5aa86920becde399ae52742170"}) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x34e, &(0x7f00000004c0)={@siginfo_0_0={0x3, 0x3, 0x3, @_kill={r2, r3}}}, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r0, 0x84ab, 0x1a, &(0x7f0000000540)='@\x10-/+@/,-}\x00', 0x3) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000580), r1) (async) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000580), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000600), r1) sendmsg$auto_NFC_CMD_DEV_UP(r6, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xbc, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0xa8, 0x19, "c84306ef943f6e901891fe46df9195a21bbd32cc1d65f107d1663a5297596a2a1db61dcf3ca008c6f2e945acc7ff6195235f1ccba21319e649382358531d3fbf5ba402c9483e775298a004c6462086de9db4a4fc23fb711416623ae592548084ec1c9de72d243140db2a924b8a98c15d26c1a7d9b02acf7c8da7065f50fd216cafe0efac3b59634c8445f859bc8b6e398db8c3e6cda52721b55aaebefa6e999f3707da7c"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000007c0), r1) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/slabinfo\x00', 0x40, 0x0) shmctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000a40)={{0x6fa, r5, r4, 0x6, 0x10001, 0x6, 0x2}, 0x2c, 0x0, 0x2, 0x6, @raw=0x9, @inferred=r2, 0x3, 0x0, &(0x7f0000000900)="8f986321e29aab1981f248896bbe12ae1e983918b8253ee3bdf96ecd502a276715e3f148d3171407f2ee9968a02ba61da9d1ed150639023f52dd76a778d959ea955de0967dc60f264a6ee6c8351957c75aa8832d298d466afaf650f648f720ed9888ff0e6f37729a93fde1f9fa8d1cebfbe1b7fc9a4699866be9239ad803cae105c6f5adb3363df30de1273975", &(0x7f00000009c0)="0432345da8b96b5776d85bcdc8cac619110d1512f0e17271aff04fbcca1df0f24066c7e2a5f5fb196053145d629e3eecf02cc2d0a0b2e0fcb025bf9b8b8d5507b75bc10c702cced59ae20d62ce875f6ec1e186"}) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x7, r9, r3, r4, 0xffffffffffffffff) (async) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x7, r9, r3, r4, 0xffffffffffffffff) stat$auto(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x5, 0x6, 0x4, 0x2df7, 0x0, r10, 0x0, 0x100, 0x32, 0x9, 0x0, 0x6, 0x400, 0x1, 0x8de2, 0x401, 0x8}) (async) stat$auto(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x5, 0x6, 0x4, 0x2df7, 0x0, r10, 0x0, 0x100, 0x32, 0x9, 0x0, 0x6, 0x400, 0x1, 0x8de2, 0x401, 0x8}) r11 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000c00), r1) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x49b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4041) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xf3027d374b3c851c}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xf3027d374b3c851c}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_ZERO(r12, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r11, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x62e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040854}, 0x40040) r13 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/oom_score_adj\x00', 0x40, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000f80), r12) (async) r14 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000f80), r12) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_RESPONSE(r12, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r14, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x40000) epoll_ctl$auto_EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r13, &(0x7f0000001080)={0x1, 0x400}) r15 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), r6) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x140, r15, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0xc5, 0xba, "745a6703d90645a3ddb41a3f437624fe16b53413174a70af677a65d43498d525a0ce5f060429ddcbad795d70f4008ccddc079c4f588129cb8ea9dc9ccb930ddc7e1c783316b781d791887632127cce3bb536dcb1c132fd444a6572c4773663146cde0e929ce853596a49fc717a50e8b9d70e493e1698ae77209dd5c634970cf528a974056879a3cf70c5b60dc46d4f6d44a820722e24d04b2f3b4c362faba1f2e10948a96f591be88dbaa912210edfbe399494c26a9ef7d5abde1d647b5f618d2d"}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_QOS_MAP={0x42, 0xc7, "5fb72acc68ad2df557722ed161e895e99efdba9c4d0d398e2b4e6219529a7b3088582768e7c5cae9ef9e3d5d97c39ec53af0e1a6f8330b02789a7e3fec76"}]}, 0x140}, 0x1, 0x0, 0x0, 0x8004}, 0x20008810) (async) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x140, r15, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0xc5, 0xba, "745a6703d90645a3ddb41a3f437624fe16b53413174a70af677a65d43498d525a0ce5f060429ddcbad795d70f4008ccddc079c4f588129cb8ea9dc9ccb930ddc7e1c783316b781d791887632127cce3bb536dcb1c132fd444a6572c4773663146cde0e929ce853596a49fc717a50e8b9d70e493e1698ae77209dd5c634970cf528a974056879a3cf70c5b60dc46d4f6d44a820722e24d04b2f3b4c362faba1f2e10948a96f591be88dbaa912210edfbe399494c26a9ef7d5abde1d647b5f618d2d"}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_QOS_MAP={0x42, 0xc7, "5fb72acc68ad2df557722ed161e895e99efdba9c4d0d398e2b4e6219529a7b3088582768e7c5cae9ef9e3d5d97c39ec53af0e1a6f8330b02789a7e3fec76"}]}, 0x140}, 0x1, 0x0, 0x0, 0x8004}, 0x20008810) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f0000001640)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001340)={0x290, r15, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x1}, @NL80211_ATTR_CQM={0x252, 0x5e, 0x0, 0x1, [@nested={0x88, 0x86, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x7a, 0x141, 0x0, 0x0, @binary="569b0811baf1cf0f2ae6177bb4c77a933f51c72b28c9d740edd5d44e54f49a65023388de198304c06559df6f73f1259f9acdd0723e4f53e99466d660f67f910a17a01338a6321c6f9fa58eea7d0accca1b02aac9122dccb2e7e7935691677ba700d59ba668d53167954222d09b2ec571a81b5b49948d"}, @nested={0x4, 0x6d}]}, @nested={0xb9, 0x41, 0x0, 0x1, [@typed={0x4, 0x137}, @generic="81b98a72f8d6e046085e68e7acab1614cc81a013637b21adc9f348da53158f110efd288d3c17a1ca220cbcf7251bd61b6c5847a88a7b6186baf326030948780e465c06e9f43d0a18dab31c07bdd68504df541bc12d6a9b01", @generic="3de77648e495e0d8f3eb2e2568e6ca", @nested={0x4, 0xcc}, @typed={0x14, 0x166, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="df29d1fa8d4d69d5b3fa5701abcfb2bcdcb03178e3e8acff05cd36a15daf6e92ff74c5d3f178da34e6190ff85329313d61b8"]}, @generic="25287ffac1f88bed1156932206e1a2ed11d8380c336db67e2f99a94cb77340dfdd90e6080a52a9f86be46c31a3766e02ca71ccdd47a934e6d18a93c90ff701eaee0f530e6d8e1e1b207ec462da7cd87a1360e0822aeb038b136c6efaa0acefcd712c66d58d7cf894f23fcef021b6bfbb20ac9150b08545861ccb7c5aaac67fa68644a36f2286bb73b93f2795282d1d0f11f74db9fe6f6ecfcd18c883d52f666cf515aa6f889045805440e8f766f8b0fc12610e22dd45fe", @generic="74ef363f7fbabfd87a4d01c011d8b1fe1dc6d48b77d1de6d16acc4960554dfa0b65e69d7d525b92f27a475c65fa2f5f0d00da2b2199bb143d59a18b44a77a4", @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0xd9fb7ad}]}, 0x290}, 0x1, 0x0, 0x0, 0x30048011}, 0x10) (async) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f0000001640)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001340)={0x290, r15, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x1}, @NL80211_ATTR_CQM={0x252, 0x5e, 0x0, 0x1, [@nested={0x88, 0x86, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x7a, 0x141, 0x0, 0x0, @binary="569b0811baf1cf0f2ae6177bb4c77a933f51c72b28c9d740edd5d44e54f49a65023388de198304c06559df6f73f1259f9acdd0723e4f53e99466d660f67f910a17a01338a6321c6f9fa58eea7d0accca1b02aac9122dccb2e7e7935691677ba700d59ba668d53167954222d09b2ec571a81b5b49948d"}, @nested={0x4, 0x6d}]}, @nested={0xb9, 0x41, 0x0, 0x1, [@typed={0x4, 0x137}, @generic="81b98a72f8d6e046085e68e7acab1614cc81a013637b21adc9f348da53158f110efd288d3c17a1ca220cbcf7251bd61b6c5847a88a7b6186baf326030948780e465c06e9f43d0a18dab31c07bdd68504df541bc12d6a9b01", @generic="3de77648e495e0d8f3eb2e2568e6ca", @nested={0x4, 0xcc}, @typed={0x14, 0x166, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="df29d1fa8d4d69d5b3fa5701abcfb2bcdcb03178e3e8acff05cd36a15daf6e92ff74c5d3f178da34e6190ff85329313d61b8"]}, @generic="25287ffac1f88bed1156932206e1a2ed11d8380c336db67e2f99a94cb77340dfdd90e6080a52a9f86be46c31a3766e02ca71ccdd47a934e6d18a93c90ff701eaee0f530e6d8e1e1b207ec462da7cd87a1360e0822aeb038b136c6efaa0acefcd712c66d58d7cf894f23fcef021b6bfbb20ac9150b08545861ccb7c5aaac67fa68644a36f2286bb73b93f2795282d1d0f11f74db9fe6f6ecfcd18c883d52f666cf515aa6f889045805440e8f766f8b0fc12610e22dd45fe", @generic="74ef363f7fbabfd87a4d01c011d8b1fe1dc6d48b77d1de6d16acc4960554dfa0b65e69d7d525b92f27a475c65fa2f5f0d00da2b2199bb143d59a18b44a77a4", @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0xd9fb7ad}]}, 0x290}, 0x1, 0x0, 0x0, 0x30048011}, 0x10) 2m31.548544763s ago: executing program 0 (id=2457): prctl$auto(0x8, 0x0, 0x0, 0x2, 0x100000000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002440)={&(0x7f0000000080)={0x23a8, r0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x6}, @NL802154_ATTR_SEC_LEVEL={0x2357, 0x2d, 0x0, 0x1, [@generic="c7b8e54adb018593d06b7f26044e3dc6b9fbdf291d618a98581d38cf4ccc8db483703cc542057e075764ee58df6d1467b3c35d236f17d0568481731c032a6feb7f0ab5cc9ba4c41dec04512c2c6087ce8c2959e01f9a169162abec6692387eba474f90e8e55a61800597922e2d9d3b38c9fbd126f0f235fcfcc6ca487b29fcbd27343d06f9cdc21ba89e71a04edbe624eafc0cca4eacbef34ef851cafa55eaf5cbb37ac97ca14db9efa674d3ad8355f278b101ebe38a15224f5074c09905a1bd5bd24f20defc935d1733db85f5d727a4088504931ac2a2886cf80fc6b25a509dd1dd32c3bd2ba202a8134eeaa1", @nested={0x11d7, 0x9e, 0x0, 0x1, [@generic="d657314be89d4fb48866b535c659a533745ba9d8ecf84d9990fdb40b57bc38204b20b907aa59f191d1f0dc457fea8debe2df1776195fbf98aca62dfa00b9f852124ee97f1e2f78737820af5ba6d189970d633c6118cc9012db9ef283d2aac05b6dbfb4d71beb1ed4a2e00edeaa12b9475fd52e1a349607bcaa897b6f06387b3e8328f294", @nested={0x4, 0x133}, @generic="9262520d5f44f8e56468e3258408d96ba7f095234b584d8cce29fe8dd22c6e2c83a3cf99ad7ae1b84790e42cc3c92aba8a75338521883ba00fd99a2c4968340bf46d202c4936ad414298be737c1ac270ad81c3a528c04450f10093c5895443ba04bdc515e21ff004005df7c75790d6eb105b71ab733df2c204e3d97ff5ba7969dbac43d048657f675c5e61b02cc136f5d8f062dda780f81f59437bd2359d5b107e7a92e607fc54899ba1d34db1ae1fbfa69b78d8ea5e5ed891dbc8f21c9f485767345eb1e8ed8046edb36e27e5", @generic="8f822e4fe084755db6a07817a2164081720ef19dd4e6fdfdbf4298760330f216aca2bbceb8074382ec8ff9765e9d6996639506fb97a825c33cde0240bdacb9b5d0bdd23d8d6af9c481092d001189590697077864b074b12dab694090ef7e18d5bebc2189e1fc0bca9ea2f165315b5c58e827b06b4f1d5a6190020f962910", @generic="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"]}, @generic="17643287669b091d42a07597e1e6bffbb449d3dff7664581e588825416bdd0b1d5978c45d71f5a8e06f6865ac414eb19bf4b4c01c20c7fe3ee6d33aa193734548b20e43448a5d7b31c458453e4b6345c989dd2dc3bda8d1c867628d3d0b2de0dcc53aaa500f7a68f8feb4cbbac84d926bdc3aee2e2b1e019274cc33bd77d9af743c632c46fb1b43a7c64a59c8159edd2f3f98cc6e4db577a187706454d882c66da5ac1784e91e6a45ba8377d76d7cf32e1dda69c41f296738cfebd56bc4ab0d48587cde0634cafbe2f3c0a2bda4d2756c9cf496be71a98e8322e8ef853f2e78eb37ea293f3dab0481f06085fbecd77b3d88d5e8db3769c03dd482dfc9fbdd4b5837a506b95c9ca04d032abe3388ad7d73b303e6fae934cb5b9d6658676d45c3028bf72d8225c6587aa8a56899ad5b305de355424dee56f3fccb3aa8615da148368c67575eaa37b29b5b75a1a0ae4f54a4a1d7eeddda7b63911484ad81919eedac73f3476d32875fd7594f51cfd87acfb4d2bc1e6484e31c396ea6dce8e82d0ea5dd56566ceca019d0acd39885b5d34c02c34073f4dcd847d12f32ad9e86085147fdf55c209ed04adc8dac433d8527b554931cf936cb06c414bb75e115cc8f7a8f7b36b3d8ff00aaf19c5acb9243d752947330fb431043cd12d09cf07a89d629460e49bd751d1d9f4f018e0b6df1c46bfe46950f327e945669a6f5e2bd995552fc75a9d6fddad3192bf34c35082b8ce61d6713d799856e252aa6a7c5321ba38c2e3fd8e86d44480803aa56a5f35e56489e23f378135b52b7df54d8fe32bc71aa73bb99c58ddaf04675e8c5a52cb77ea7c158d320c52531b3fd6eea4bbafffcd0caf7ca5e589e6c4f9d986e02bbfd815a2249a1e2cdc18a95a85f8e90bd9ce388193d9719806a2dc38ba1d4431e2799b8f35aad727724dadf00a3d7752bf90b2c0e1116850e42480a0c296470e901cbc1db251bb919c97098a23f0ad94e5b75f47a8f3d6cf8b1240fc2c98730a9536efb56ba5954eee6f0a31fcdc008337be34b8f07af87e65e63eb936d3a551619570558eedaa80b3a94cf26bf65d2d3f0b822019a5e19f850d8ea00fd2ecd402a9c7370d6df6de627420bd907d8a7f9a328c53e8a452a1c54815128eb49557a1481001912d6976a16d2db3aec89ebd511d74170785d22a5ce5fd4a84feac4db1a37bf334994650cf79b3e1af8c88f90fa02d6ef765f8c7d51c58ec7182d1dd4687d7093cedec5378d69c7dcf3f0d57001b093e619773408841a053e5dc8183e18dd417b7e7fe4f7d75e2a9eb65a35a0cf6fd0455ab1fc1cbee7763a865588136b4dbfcdd60fe45f79b5e92e90c6f60287ef7835de7c78eba12957e1f190cab1c91b2ac736ada1e1ebdd6d6e69a66018c66204d8bd00b6419ef0c14fe35645ce16c7f61ecf7b9454cea6350ad60ad8db1e6aaef35e4afb46db75614cc2f29367fba60cb51e8394e50f14fda586de3499dfa52beea78aa86cf6c233a823d37afbc105bd486f85883a60219431b5ebc3ef503dd71e52d04bb487a611dcb8e7f7dda98dc58805878fa14a14c98b9e22a86e307d2424dd20924fd000c731572dc0ab2dd0203df35df911eb86e0257eed5f3987e49bb07cb73c198f856d6233a9e433d64a5ec7d9818a8f5b3bf95a175c0ad4bfc340fd05440dcff82dd413545b76fd2f773129287b77215e72e4d514c20078104c08a798245872cbb943819c9382e393d201b1e7b13a4a7646c1b770825e57a54134686e403e1c1fbf591f32acb487a28f656f762f87eb1c7e01752768824ed942c617355479e6acc8b25e7f56e3daa6d045d41f1764c4c76427a047ac40eeedf0109bf28b8c56090ed7c72cb77797f8dafbe6480c699f5d99e201683c16e6df1c94c4f7f76be69e4bc4f17c0af1dd465596c5f90adb765946dcd1429bcbf895cb8f6fe62f7fd07a3415b6aa6b72c30aa3ee0b044b06b981ebe9df1a0f2773d3e31eaa732d7a5d933cafdb7ec45763ca980dbe87042142fc5ab049fc1f7f060b17cac7150c3748ef3fd43944ec27250c6ef69a817a40f56b3648ccdbe3fc710ff656a788b4f8d8f6dd3a0cf222a678e590dfd7865d6be5dc939647726203949437c81b291bc9be548b852f8f88c06734e6ccb2d85348057a3a5e0f69784d73f782d4c011724c36d292a887cabf8bed8c8900ac1719a3e3ac85f7532565596bca2f161440880305ee2f562931126e0a0a18c74739a47d7823666d416d8cc04df9fda3a8f70e5df8902ed9d557bdfa3daed53b64309c4c2a9cc356ab0c44e60047e558e510e441a6fbba93afc3d603c79e9280adf38b048ef567d9ac84df05527826928585bca7fd7bc5841da284fae879913b8e300b57da8f377e55b732b3a7a1a1a6508ec2c8a8f90e377931f3fd2883d0afd05ea4ad815da8bb725bed4a57923083d3bb13ba21062277affaac8f1a5120245a0571c6d45fe702a8ea516c3e6d81414c9ec276fb7b4a05c9e16695e9eee2ff91acb39b14fa5dd59c7b8a6d703a75e3c1f6d62340234e5db26ad0657cfb28abfd4b98939ab9c777bd59db379c299530a8c07f9c7facf00783f6b858fd4dcbd0fdd57ac2794cbfd6c6ab8f7a135b4e71359767b08d277c85afee120472dd6f5d19d87ee97a669194013dd9fcc37064ec60b8ba82f8f34f11d5f1e02f9ce09db977fc75a9190b136aeb5c14c4e1c7af3e83398fd11d8ddd3ef6540c66fe2d640cda91ff4c05976dc6fc49c96bda050e5633759bf1e6164438ea60b91ffa0d3877af5b5a3911ffd5df7a050dec82f41340960fde8527b5735f55dddeb0450b703b981ec1dd4c0cfff181af1210630d6fcaa7777fdf6a10ffb2717d41c536c66b3fc850b01563462b93f1e9607ca0f1a9ba149de40c7a54ce872a78a2af79ef2110753c37db8e867c1b29965751656341d034a234618a77e3c479eff0442d3d097cb7063c557903334789e60a4ced2505e70a099f392704d1df564f7bf6af0a17f15988ef7d2ac7857bef183b95fbf5a22f7e8c14b5cc0d0f195eb0b9c7895c8110f38a5c9e2f7eea92474b5b5be9bbf6b209ffff8b8738513c9bfdba2edefa8ef67827a6f7f483fb1e9c83244a60fbd11cf3d8eff7dc2461332eba34071aaf406286cfc1c68eb96cff352f56b967df661d8883ad0134dc9375a34008c57b2584c13411145d8a9f9f1fe434d321287bae05c144c6cf5901910da416aa0a89f448fdfab2df5a5ea18f5579b430e966d87cbbbe8b19691e717da4c5f5e6990071a18a18b94b656a230040e307c30a31aa62f4cb98f658e1a0fe1c05c62571a28587abd5b67918b1618a9cbecb4c2ea1ae7e460b797d27c0b3090d38f08be42bd024a783cda4b42374ea6e5ae0bcfc2124ede9e83fac2fa0691537e6cf8da88124a1af6b072fbf6f8374cc7329e855f11e8d39d17316dc4b2f866e88ff945899b59cf48774c278d8370f27e81b67dd7a1d6bb49ddfd8342f61099b0cbe97a717c058eae572c25a5e6db8626108b707778f8bb11b3142bab9dddb32f1254ee399f598de1a0e3cb61c58377ec1c814fa9d2a5407fab3f221eb57ce8573e09bd15e9c8888a7b080cc56b6d89d477d72840f985a7c7396a4b560a2da69b622d42ae69f401c1718c43b68e450e7b9c3d2698d13b23789e73e631aed82662eb1b81815b1e5fb139d663265d1a28fbb27e6888f12503f235585e329b1240c1a009072f50cde36a6cb8ed07dfc470ae6a96d2cd5d58a394577ca2f08f20c04d70d8026db52355326200b2ab61c844ece4e10f31bd304e651af78aa375357eeac637e0582fa9b34301dc89fef8e670054934c717daf9ca70e26bdf98daa166577641206d7921ec54d7d5d02fba4ece8b3484483acc9ffc7770a389e676d8717232ac0405408908f3b77df7239a470127e4c7138af90a792ce1989b3ee7d84c37c8be6e3e51c20cc2fa1bbf6a5d6765b18a83b0ccd2fb97c6187a86ce0b7e9f7578b749d335ffae13c355d236edd921f991cec3c0a5cbcc89fb41a0907fc59f437b2995d9f01e4f6589e44b8f2a9fd669af1e2d083b3b7a74fda5cbf4406df56966522608cc8005ae1f2bfd484b9069db04ae9f75b61c89cc1c0249d51eba11d00dd327dae775fa2e280dd34421932ef0caa17c1c14e4700ec1c88fcdbb4289a14e3bfb378a38eea9ccab83a0bb1f016b9f8922fa3f14096bdad359952f88b9ff0e0776851a2472064a2dad17e680871462450332bb57c06f4f9ad0d7c10dcc3b830f0d5b85e695ade96b9a821dc29fa310b80b16ee13271f252542a91b012f91212950aee4c852f17909261fafd957ceed459510150d0beac07d5db57af718309a04f52cd261a9eef23e206da992a5af01e82fc1cbf0116228ef016f13a109334e8008631932ac6c6dc7a26513f6b2bcc4cbd2687f319efba4ab02010b13f715736d3417d0c4c6f67d0a6a3661ca416c418f93208d74473f196b810876f12ccc09475d0869b7ddfa595fb8d81a2d35ae0d336bf8160bed98a20f3f811c47f51a0c4b22d73b7496a9e525efece8e33e3b1fb7c3ec5d8d2a23012bdd1eb2fbe1a174a7b972c8237e7524c8da395aa0372496e0d4d4ddbdb8c983ed1e3d37a6cef7ed64b2b8561189226f0245319f05f9b01c9240ca8bd34cafa4740f0fb89cad66dbf0113bbfa15628fcae233a908c0679c5e8412ba7af38345c58a100c11630cd0f0eb20f320262e3c090ac170449824db5e23fc1cbcfd91a927c2497461a04d85c05ee704ad4e3c9e01f129bb615c9edfa610b016d935f8e0508058a3d602d7b7a330a242a8cf3981663165f6971c48199233a0612688ade7004d876b50140b9248a62c8203c870b94eca16fe297ebbd9acd0702d43641d83cf9f0389eba71b1d8a30d5c176570777dee9e6a20f3b0a5393a535e13b5e8944eb01a2f5ade4da58d46c0906d633c494eff7328af1cd7e550131c6f8e52ef9b786e9df9f36b7044f7bdbbbc49d7ece0d756313fd0669798996981c79dc6204beafed0017428a748ec17caca03797c185a2815ca2fb9074df0fdeb514fc80d31fc564352c24a8c14803c6e5c4f1ab683620a6f8781482a921313416e67f271b17e90686e24d184065dc23ec4a8617cc3862cfe425ae6be1590681bdc8371f309ee22c92e9ce6a6ea174b10efcac085d8972b28b563952e1bc0104420323676b4167319915682a15e868e500c67bc577d1d917182095ab141a2534c2eb9329eb0fb965bb511ebca3a3ea230213580a3ae9fdf5e042e5076367cab0b8c8db66015237ff0aa7e180923136d512422d9ac659eb9e77bfa9c4a8f3421664d04b5a356b5d007ea1adce8e02dae1c86276b4d49fa3046b727281a7e7863b6d1c837708eef16d74e86c681a3e4bb41bc3b34700571d9ebb8e4b363c600b00428582d9d7d443847c7c6105b7cf4a970b474cd3d31f9d78f9df2fa6e23f554104b1907e33a718047a72e504018f6c5cc9780f114e0b4c4c207741e82a1989e8dc997f4112137953bb6de074d9a06a1a3da7eda9af0b7115c59baa35f6cd35976b79f03f5e231382ce9cc93633e2a731f762295193745c38a1edbd9d05641c5501cdb41d6e9f94228b79c0d330d4691c396029cfb7ecf0e3112cbdbd9c49b49a49db4940ea9b7a5699c645cccf06a86d03518814e777939df591c4399a2474d74638dadb81c69762f9c7c3a566e1a96e9878a8cc038425640ea81069a83ad34b1f0bd68448942eb68e47198daf32185bfce3739aeed7d8e81f842376cbbdd381a557223c8be", @typed={0x8, 0x2d, 0x0, 0x0, @u32=0xdbd}, @typed={0x8, 0x124, 0x0, 0x0, @u32=0x800}, @generic="3e65e0b0115a2306e8bb91a3c0180ec5e9d982778c695ea03cffdf84c537301b676eb863699043130d6b494c5f6b70e6543d97f1f2f2a28b0c9646fb641fa347b8dfa841b5c5d2558757eda1c0ae32f72676526be28669934797c7ad31afef60df2d", @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@local}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x6}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x1514}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}, @NL802154_ATTR_PEER={0x10, 0x28, 0x0, 0x1, [@typed={0xc, 0xf5, 0x0, 0x0, @u64=0x8000000000000001}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x9}]}, 0x23a8}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x1, 0x10d3, 0x3ff) bind$auto(0x3, 0x0, 0x6a) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001840)="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", 0xc3f) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x18b080, 0x0) write$auto(r2, 0x0, 0xb) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x1d, 0x0) unshare$auto(0x9) futex_waitv$auto(&(0x7f00000024c0)={0x5, 0x10000, 0x7fff}, 0x8d3, 0x1de, &(0x7f0000002500)={0xc, 0x1}, 0x8000) 2m31.055940378s ago: executing program 1 (id=2458): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x80000eb1, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mlockall$auto(0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f0, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000002a40)={0x0, 0xfc, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25050000ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x400c0c4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x2002, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xff4fe636e6ca8df0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) prctl$auto(0x29, 0x0, 0x8, 0x0, 0x0) memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x9, 0x5, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x8a002, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x8, 0x2020007, 0x9, 0xcb1, r3, 0xd201) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) 2m30.140081753s ago: executing program 0 (id=2461): mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r3 = eventfd$auto(0x0) readv$auto(r3, &(0x7f0000000380)={0x0, 0x8}, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) 2m29.121806917s ago: executing program 0 (id=2462): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mbind$auto(0x2, 0x2091d2, 0x4, 0x0, 0x6, 0x7ff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7fffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x481, 0x0) bind$auto(r1, 0x0, 0x6a) 2m15.57492849s ago: executing program 32 (id=2458): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x80000eb1, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mlockall$auto(0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f0, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000002a40)={0x0, 0xfc, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25050000ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x400c0c4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x2002, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xff4fe636e6ca8df0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) prctl$auto(0x29, 0x0, 0x8, 0x0, 0x0) memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x9, 0x5, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x8a002, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x8, 0x2020007, 0x9, 0xcb1, r3, 0xd201) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) 2m13.557059617s ago: executing program 33 (id=2462): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mbind$auto(0x2, 0x2091d2, 0x4, 0x0, 0x6, 0x7ff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7fffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x481, 0x0) bind$auto(r1, 0x0, 0x6a) 1m42.998864953s ago: executing program 3 (id=2573): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x48c83, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000180), 0x6040, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000002c0)={0x553c81, 0x10, 0x13}, 0x18) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x801, 0x84) fcntl$auto_F_GETFD(r3, 0x1, 0xffffffff) io_uring_setup$auto(0x4, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS1\x00', 0x101e81, 0x0) epoll_create$auto(0x4) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x1, 0x7, 0x9, 0x4, 0x1}) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) acct$auto(&(0x7f0000000000)='/dev/cec31\x00') close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) 1m41.078464085s ago: executing program 3 (id=2576): mmap$auto(0x0, 0x42000d, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/003/001\x00', 0x189701, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) lseek$auto(0xffffffffffffffff, 0x7fffffffffbfffff, 0x1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000000060e9e9df2d813c254c6de340965eb439825e0b8c54ff4716dac3e3f30c836bace18392c95a2cace7470a1cf4302744dc8103a3522eea40badfd28d9f92154a90efbcbb16d1620167bd12649cfe07902112a7f384c0e4d2ce53e4", @ANYRES16=r1, @ANYBLOB="010008bd7000fbdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="0500370001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (rerun: 64) unshare$auto(0x40000080) (async) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$auto(0x1, 0x5761, 0x4) (async) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x301901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xf7ff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", "faffffff", "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) (async, rerun: 32) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 32) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) unshare$auto(0x40000080) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/nfs\x00', 0x50201, 0x0) pread64$auto(r6, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) (async) mmap$auto(0x10, 0x2020009, 0x4000000000000003, 0x14, r6, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec6\x00', 0x80001, 0x0) (async) futex$auto(&(0x7f0000000080)=0x8, 0x1, 0x9, &(0x7f0000000240)={0x5, 0x4a3c}, &(0x7f0000000280)=0x10001, 0x8) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000100)={"dc5f0f51", 0x9b4, 0x6, 0x2, 0x9b3, 0x101, "2ce1082a8e675e98a04fbb00", '\x00', "0001410c", "00000004", ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) ioctl$auto_CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000000)={0x5, 0x6, 0x7, 0x1, 0x2, 0x7ffffffc, 'f\x00\b\x00', 0x2, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) 1m38.85481799s ago: executing program 3 (id=2577): setrlimit$auto(0x10a, &(0x7f0000000000)={0x0, 0x5}) r0 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/sessionid\x00', 0x80140, 0x0) statmount$auto(&(0x7f0000000080)={0x5, @inferred=r0, 0x5, 0x7, 0x2}, &(0x7f00000000c0)={0x5, 0x1, 0x9c0, 0x800, 0x0, 0x9583, 0xb, 0x7, 0x8, 0x9, 0x63d1, 0x4, 0x9, 0x2, 0xfef, 0x3, 0x8, 0x5, 0x8, 0xab, 0x55af, 0x4, 0x3, 0x3, 0x9, 0xe99, 0x5, 0x2, 0x40, 0x81, 0xab, [0x0, 0x10, 0xfffffffffffffff8, 0x7f, 0x4, 0x8, 0x8, 0x9, 0x9, 0xc, 0x8001, 0x59, 0xfffffffffffffff9, 0x0, 0x10001, 0x5, 0x7fff, 0x7, 0x0, 0x4, 0x6, 0x8, 0x6, 0xd, 0x2, 0x9, 0x84, 0x1, 0x7, 0x5250020b, 0x92fa, 0xa2, 0x0, 0x4920, 0x6, 0x7f, 0x4, 0x1, 0x200, 0x6, 0x0, 0x7fffffff, 0x1a26101a], "9b75f8f2b6251922877f8af3c2fdbeb4a3c4e7b82c1f3911297e81481870263f8203343b3a27d05f9b4cde5fd9996010b8c14131ceafd5ff09a89d661f4f2eea299b5d1b1cd9b760a653ca02cfcdf55c65b40be070f70b2fc272857f3f60099a8f23802571d8849d92c458aff2b38e16a172e4d7844d15d2663f3dfec0a6f91d656cbf56fd243a4dc494d2f486d8e38504ccf8523bb9f5db2f7db19eb7fe893c"}, 0x11f430ec, 0x9a) getrlimit$auto(0x8, &(0x7f0000000380)={0x7, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x4, 0x9}}, @OVS_METER_ATTR_USED={0xc, 0x5, 0xd4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000500), 0x280100, 0x0) setrlimit$auto(0x80, &(0x7f0000000540)={0x9, 0x6}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/loop15\x00', 0x202400, 0x0) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xdff1}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x7cc7}, @NL80211_ATTR_SCAN_SSIDS={0x7a, 0x2d, 0x0, 0x1, [@generic="8423bcec9885c0ebb2285f5d6a0ae0891abc67baacf99c4f59dbcf1f13fa3ea8d12e621e7a8ca969a4936a4509259453274638ce9b52a79a0a7d523a9f34a029397e467025ff79e0b7db71fb5582dc6834ef0a812eaa89857120931278b7c9a25f578a00af1062a9614e55479d48ef925122644e6855"]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040841}, 0x4c085) select$auto(0x16e, &(0x7f0000000740)={[0x8001, 0x9, 0xb, 0xffffffffffffff81, 0x8, 0x6, 0x0, 0x9, 0xf4ab, 0x2, 0x0, 0x7, 0x1, 0xfffffffffffffff9, 0x7, 0x6]}, &(0x7f00000007c0)={[0x8, 0x3, 0x7, 0xe6f, 0xffffffff, 0x2, 0x7, 0x9, 0x81, 0x7fffffff, 0xffffffffffff1d7a, 0x0, 0x4, 0x0, 0xa9ef, 0x3]}, &(0x7f0000000840)={[0x7, 0xc1fd, 0x7ff, 0x7fffffff, 0x1, 0x1, 0x0, 0x7, 0x8, 0x6, 0xaa, 0x7f, 0x5, 0xd560, 0x7ae, 0x7]}, &(0x7f00000008c0)={0xf20, 0x8}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/fail-nth\x00', 0x10280, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000980), r1) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, r4, 0x335, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8e7b, 0x8, 0xfffffffffffffff9, 0x5, 0x1, 0x4, 0xffffffffffffffff, 0x3}}, @OVS_VPORT_ATTR_IFINDEX={0x8}, @OVS_VPORT_ATTR_NAME={0x10, 0x3, '/dev/loop15\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xea}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c044}, 0x20000050) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0) gettimeofday$auto(&(0x7f0000000b00)={0x5}, &(0x7f0000000b40)={0x5, 0x9}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x8000, 0xe, 0x34}, 0x18) futimesat$auto(r6, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x6, 0x4}) r7 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x5af627a3, 0x2, 0x0, 0x9, 0x0) read$auto_component_list_fops_(r7, &(0x7f0000000c80)=""/2, 0x2) name_to_handle_at$auto(r6, &(0x7f0000000cc0)='/dev/loop15\x00', &(0x7f0000000d00)={0x52, 0x7f, "2d0fe593ff9b11ca478644f23e855e8c51ddc576ce3e8ae9a86309735e0d04a5b5594c2fc3f4bc5a2ab0ffaf61688792580309b8b45728f56defc1bcca46da63316c69575b4abb16d95a387b8e2603822b81"}, &(0x7f0000000d80)="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", 0x80000000) r8 = getpgid(0xffffffffffffffff) prctl$auto(0xc00000, 0x81, r8, 0x3, 0x0) setsockopt$auto(r5, 0xff, 0x9ac, &(0x7f0000001d80)='(5\x00', 0x7) preadv2$auto(r3, &(0x7f0000001ec0)={&(0x7f0000001dc0)="d10e0f15b591f54fdfc55bed5d60e95995f00e1897304a34d03827f397b69f233445b5618cfcf4e28b1e8b8a53c91662e087c7da753418a7d5ad86c76489d74920f830e933ec17945388e4196d82564a7d28d637977be09bb8ae44345cc61013d02ceca2b0d906c87cf9cdbf517ecad77bfb007f1003e142f16432b88835219e45a744c72b773c7fbdf7f18fec4d360dbcbc876f6edfce78be39d1248f8610b8fa5200366eb77e76f9f91d1df06c1fbd932180bffcf9c6c7ee2e1619327d6aa8eec40e", 0xfffffffffffffffc}, 0x8, 0x10, 0x516, 0x7) getrlimit$auto(0xa, &(0x7f0000001f00)={0x9, 0x9}) r9 = socket(0x26, 0x3, 0x10001) r10 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000001f80), r1) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, r10, 0x304, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 1m38.655468587s ago: executing program 3 (id=2579): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xe938) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000000040)=""/4080, 0x1036) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1f, &(0x7f0000000000), 0x401) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_setup$auto(0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x0f\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\\\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x13, 0x7) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/security/tomoyo/manager\x00', 0x20802, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000000c0), 0x0) write$auto(0xffffffffffffffff, 0x0, 0x9) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = socket(0x28, 0x1, 0x0) setsockopt$auto_SO_SNDTIMEO_OLD(r4, 0x5, 0x15, 0x0, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) 1m37.626521264s ago: executing program 3 (id=2580): mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x100000000000eb5, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0xffff) r2 = io_uring_setup$auto(0x86, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video11\x00', 0x400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = memfd_create$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c009ad3", @ANYRES8, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4004000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) statx$auto(r2, 0x0, 0x1000, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0xc040563e, r8) ioctl$auto(0xffffffffffffffff, 0x40205657, 0xffffffffffffffff) ioctl$auto_BTRFS_IOC_ENCODED_READ(r4, 0x80809440, &(0x7f0000000300)={&(0x7f0000000180)={&(0x7f0000000000)="51cb4d45663343293375668864be3e35432f300d0a91dfd8ce384d654c", 0x80}, 0x800100000000000, 0x84, 0x3, 0x7fffffff, 0xffffffffffffffff, 0x35, 0x7, 0xdee, "705af3f080043785a34a87349ace22e85495474af10f309cc1890d5e20c529530cd05634c140348ddc9d7e431f7c402b76008363e37a65b085c34e9c7b069f68"}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/231, 0xe7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000b6c683bdf7942d090000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fedbdf256a000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000054}, 0x4000) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xf99b250f0945a03f) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r0) r11 = socket(0x2, 0x4, 0x85) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r10, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x2000040) 1m36.79820761s ago: executing program 3 (id=2583): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_ro_(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_cancel$auto(0x7, 0xfffffffffffffffc, 0x0) r2 = open(0x0, 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) linkat$auto(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2$auto(0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) msync$auto(0x8, 0x200001, 0x6) 1m21.631016439s ago: executing program 34 (id=2583): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_ro_(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_cancel$auto(0x7, 0xfffffffffffffffc, 0x0) r2 = open(0x0, 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) linkat$auto(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2$auto(0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) msync$auto(0x8, 0x200001, 0x6) 1m12.979262402s ago: executing program 4 (id=2632): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000140)=ANY=[@ANYBLOB="c93ac65b273c3a050000007f41c51f8dfb8402c5679e8b659b3228003006af5b38aa17cc27ef318e24a6b0ccd4e781527d619b6b385eda50b72422fe9ca30cb5b5a29ca5e4882af3", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/netfs/cookies\x00', 0x478bc0, 0x0) pread64$auto(r0, &(0x7f0000000380)='.proc\xf8\xffcsi/sg/devices\x00', 0x100000001, 0x100) close_range$auto(0x2, 0x8, 0x0) socket(0x1a, 0x2, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x5) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x7) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0x1775387, 0x5) mmap$auto(0x7, 0xff, 0x17, 0xebf, r0, 0x1010020000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) fcntl$auto_F_SETOWN_EX(r3, 0xf, 0x9) r4 = memfd_secret$auto(0x0) ftruncate$auto(r4, 0x1) ftruncate$auto(0x3, 0x700) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 1m11.619548974s ago: executing program 4 (id=2635): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x80002, 0x40009) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x5, &(0x7f00000001c0)={@siginfo_0_0={0x0, 0x200, 0x100, @_sigpoll={0x6, r1}}}, 0x6) recvmmsg$auto(r0, &(0x7f00000000c0)={{0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x24, 0x13}, 0x803}, 0xfffffff5, 0x10, 0x0) ioctl$auto(r2, 0x89f0, 0x24) socket(0x29, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) seccomp$auto(0x6, 0x5, &(0x7f0000000280)="d4e2ebcea40463216631d4cd096286e8a022b80488f13d58d6ef7aacda1e0adfa33eee358d12387067055b946bfa474fe58da8f14460e6aa73e0bcf12982c625") bind$auto(0xffffffffffffffff, 0x0, 0x68) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4008800) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20080, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r4, 0x0, 0x840003, 0x40000000002e72) 1m7.62654119s ago: executing program 4 (id=2642): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000140)={0x19980330}, 0x0) (async) capset$auto(&(0x7f0000000140)={0x19980330}, 0x0) r1 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) write$auto_lowpan_enable_fops_(r1, 0x0, 0x0) socket(0x2b, 0x2, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) socket(0xa, 0x1, 0x84) (async) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x10000) mmap$auto(0x8000000000000, 0x2a, 0xdf, 0x9b72, r2, 0x28000) (async) mmap$auto(0x8000000000000, 0x2a, 0xdf, 0x9b72, r2, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0xa0e01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyyb\x00', 0x0, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyyb\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1m7.306058637s ago: executing program 2 (id=2643): mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async) socket(0x11, 0x80003, 0x300) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0) (async) ioctl$auto_TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x4b5, &(0x7f0000000100)={0x6, 0x9, 0x40, @raw=0x4}}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0xe1, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) symlinkat$auto(0x0, r3, 0x0) (async) r4 = socket(0x10, 0x3, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) write$auto(0xffffffffffffffff, 0x0, 0xd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) clock_nanosleep$auto(0x6, 0x6a8, &(0x7f0000000080)={0xfffffffffffffff8, 0xffff}, &(0x7f00000000c0)={0x3, 0x5}) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/005/001\x00', 0x12081, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x8001, 0x0) 1m6.975668623s ago: executing program 4 (id=2645): mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x801, 0x100) sendmsg$auto_NFC_CMD_GET_DEVICE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0x20000800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf250000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) 1m6.199723259s ago: executing program 4 (id=2646): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x68000, 0x0) r0 = io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket(0x11, 0xa, 0x9) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25020000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x8800, 0x0) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r6, @ANYRES8=r7], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r8, &(0x7f0000000000)='-\x00', 0xfdf1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000002200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11140000}, 0xc, &(0x7f00000021c0)={&(0x7f0000001140)={0x1044, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r4}, @OVS_VPORT_ATTR_UPCALL_PID={0x1004, 0x5, "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"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r5}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x7}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r9}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3}, @OVS_VPORT_ATTR_UPCALL_STATS={0x4}]}, 0x1044}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000028659f"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range$auto(r1, r0, 0x7ff) 1m5.628140229s ago: executing program 2 (id=2647): mmap$auto(0xffffffffffffffff, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x2, 0x8000000000000206, 0x3, 0x0, 0x2000000002, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x1000000001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x40004}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) mmap$auto(0x0, 0x1, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x46, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x10000010001, 0xb, 0x11) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x800, 0xe) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x5f) r4 = open(&(0x7f0000000040)='./file0\x00', 0x4b41, 0x198) fallocate$auto(r4, 0x0, 0x7, 0x4cbd5d) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r5, &(0x7f0000000000)='system.posix_a)\xb0_access\x00') read$auto_ima_measurements_count_ops_ima_fs(r4, 0x0, 0x0) pwritev2$auto(r3, &(0x7f0000000300)={&(0x7f0000000240)="47878e39ed8d5053f91bdb0f3005a25c4dae1c83c72ff42df717b8f68bcd8a2e6bdcf5c2c3ec90e3dc434ea70ca43ec225a234b793fce340b8904aabbf2f9152bf5ea2244208ef471072a3eb860873a24ba88159739cceb6c7eed96de1561a1d6a5c71469503ecd3cef2682d6f395733bfdfc968c014bb5c689dfb0a3b4fc9877056665c9afeb36fb29dcf7e2febfa950302e1c817f6c440d72e9ff23dccb911358869d417cdb95ce7dad973b2c152898ab22aa60375713a2da1", 0x8}, 0x9, 0xc3, 0x1ff, 0xfa) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon38\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x16d080, 0x0) 1m4.876339841s ago: executing program 4 (id=2648): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x2, 0x0) read$auto(r0, &(0x7f0000000040)='##.-])-!![\'\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 1m3.415657325s ago: executing program 2 (id=2649): close_range$auto(0xffffffffffffffff, 0x8, 0x400) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS2(0xffffffffffffffff, 0xc0884113, &(0x7f0000000480)={0x4, 0x9, 0xffffffff, 0x6, 0x3, 0x7f, 0x3, 0x2, 0xa, 0x56e, 0x6, 0x6cb, "db5314579a7e63f0f471dfd71d771cc411761211cb4c0e6fb81a961aebd163cd46c6a6f7bb3f4d4bd458364a81179692a0940e8b55d5a6ba"}) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mq_open$auto(&(0x7f0000000040)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9}) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x440000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0x8000000e, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x8, 0xfffffffffffffffb, 0xa, 0x6, 0x3, 0x3, 0x3, 0x2, 0x2000000008003, 0x80000000003fffff, 0x3, 0x0, 0x8000000002, 0x5, 0x5]}, 0x0) mmap$auto(0x1003, 0x9d7, 0x9, 0x1d, 0xffffffffffffffff, 0x40000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0xe983, 0x7fff, 0xeb3, 0x401, 0x10000003) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.weight\x00', 0x8a801, 0x0) write$auto(r4, &(0x7f0000000000)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1m1.960438008s ago: executing program 2 (id=2653): mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x4) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) signalfd$auto(r0, 0x0, 0x8) 1m1.797990806s ago: executing program 2 (id=2654): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x515400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0xc76, 0x4000000000e1, 0xeb0, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x7fff, 0x4, 0x0, 0x100000042, 0x800000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffff, 0x400005, 0xe3, 0x11, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x6, 0xeb1, 0x3fd, 0x20000008000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/usb23-port5/power/runtime_active_time\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, 0x0) mmap$auto(0xfffffefffffffffc, 0x420006, 0xdf, 0x17, r0, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x573b02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x806, 0x40018, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) 1m1.476095787s ago: executing program 2 (id=2656): close_range$auto(0x2, 0x8, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) r1 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) unshare$auto(0x2) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000804) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000bc11f077039d209073a511a481ed3ca2b7c0d93d5d446ddec772d0094ebfd6fb55c289c5d896c2e8d50c758f29ee41e4e6df69bf5198883144b42bc16348a9b5d16d09a42f395bf9b5b2a9edbcf47a31bbca5fec0058f049e1dc6b07a1933e51de7f06bd", @ANYRES16=r1, @ANYBLOB="000125bd7000fedbdf251300000008000100010000000500100005000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x200201, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) execveat$auto(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r2, &(0x7f0000000000)="24c021f996", 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/memory/drivers_probe\x00', 0x10800, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8002) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r3, 0x0, 0xfffffdf1) clock_getres$auto(0xfffffffffffffff5, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 49.752208867s ago: executing program 35 (id=2648): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x2, 0x0) read$auto(r0, &(0x7f0000000040)='##.-])-!![\'\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 46.271031714s ago: executing program 36 (id=2656): close_range$auto(0x2, 0x8, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) r1 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) unshare$auto(0x2) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000804) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000bc11f077039d209073a511a481ed3ca2b7c0d93d5d446ddec772d0094ebfd6fb55c289c5d896c2e8d50c758f29ee41e4e6df69bf5198883144b42bc16348a9b5d16d09a42f395bf9b5b2a9edbcf47a31bbca5fec0058f049e1dc6b07a1933e51de7f06bd", @ANYRES16=r1, @ANYBLOB="000125bd7000fedbdf251300000008000100010000000500100005000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x200201, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) execveat$auto(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r2, &(0x7f0000000000)="24c021f996", 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/memory/drivers_probe\x00', 0x10800, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8002) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r3, 0x0, 0xfffffdf1) clock_getres$auto(0xfffffffffffffff5, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 35.259077922s ago: executing program 6 (id=2712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @pid}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 34.930829416s ago: executing program 6 (id=2714): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = open(0x0, 0x0, 0x408) lseek$auto(r0, 0x800000000007, 0x0) getdents$auto(r0, 0x0, 0x62d4) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/location\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/48, 0x30) getpid() accept4$auto(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x307, @local}, &(0x7f00000000c0)=0xcfd, 0xfffffffb) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0xd, 0x0, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r5, 0xa, 0x1) linkat$auto(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x3) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, 0x0, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x88800, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x2, 0x8000000000000011, 0xfffffffffffffff7, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, 0x0) r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), 0xffffffffffffffff) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r9, 0xc1b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7a5}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x8}, @GTPA_LINK={0x8, 0x1, 0xfffffff8}, @GTPA_TID={0xc, 0x3, 0x8000000000000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 33.794586399s ago: executing program 6 (id=2718): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80902, 0x0) write$auto(r0, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) execveat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) clock_settime$auto(0xfffffffb, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010329bf700002dcdf2505000000feabb1471aa987110c00010005000000000000000c0001"], 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff24, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="68460a013aefea28718b4f978b0fdba505"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x2}, 0x1, 0x0, 0x0, 0x9}, 0xa}, 0x7, 0x0) r3 = socket(0x1e, 0x4, 0x0) execveat$auto(0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)=&(0x7f0000000b80)='\x1c\x00', &(0x7f0000000c40)=&(0x7f0000000c00)='\x00', 0x6) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) 33.37067104s ago: executing program 6 (id=2719): io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x7783, 0x9, 0x7c], {0x913, 0x7, 0x3036, 0xe, 0xd, 0x5, 0x2, 0xfffffff9, 0x2000000f08a2b6}, {0x204000, 0xfc, 0xc, 0x0, 0x0, 0xb89, 0xd5, 0x20000838, 0x8}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/type\x00', 0x180102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) setsockopt$auto_SO_RCVPRIORITY(r0, 0x5, 0x52, &(0x7f0000000180)='*^&\\-!(-\x00', 0x4) msync$auto(0xffffffffffffffff, 0x3, 0x16) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0xfffffea1, 0x0, 0x1, 0x0, 0x0, 0x2000c180}, 0x240008c5) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r3, 0x6a, 0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/driver/nvram\x00', 0x10b402, 0x0) socket(0xa, 0x1, 0x84) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25010000000c0007ad2d42e580040009800c0002000600000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) bpf$auto(0x12, &(0x7f0000000040)=@enable_stats={0x1}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 32.208669744s ago: executing program 6 (id=2721): mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r1 = gettid() process_vm_writev$auto(r1, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) prctl$auto(0x46, 0x23d, r1, 0xfffffffffffffffd, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x480, 0x1b2) utimensat$auto(r2, &(0x7f0000000040)='}[,&*}\x00', 0x0, 0x1002) fcntl$auto(0x3, 0x4, 0xa553) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0xfe, 0x0, 0x8) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(r0, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 30.023411526s ago: executing program 6 (id=2727): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/audio1\x00', 0x101800, 0x0) r0 = socket(0x2, 0x2, 0x1) r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xd}, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc2602, 0x0) r2 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim6/udp_ports_open_only\x00', 0x800, 0x0) read$auto_dfs_sched_itmt_fops_itmt(r2, &(0x7f0000000340)=""/242, 0xf2) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r3, 0x400454ca, 0x38) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r5 = socket(0xa, 0x1, 0x84) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000440), r5) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082bbd7000fddbdf251c0000001400138008008800", @ANYRES32=r0, @ANYBLOB="08008500ac1414aa05000a00040000008555959358036db8239d38631dad70bd080004000008000008001e00020000000a000e00297d0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4850) getpid() write$auto(0xca, &(0x7f0000000100)='\x044\x01\xafn\xff\xf7\xf8{\x00\x00\x00\x002\xc7S\b[u\x85E\x9c\xaf\xa5\x92\xb3\x89mB\x18\x1e\xc2\x03\x00\x00\x00\x13\r{\xad\x9f\xa7\x14W\xbd\x0e!\xe8\xa6#8\x10\xef\x82\x01Q\x8eL\xcc\xb6\xbb=\xc6\xad\x0f\xc7\xbb\t\xc2\x14\xafWU~;\xbbj\xf4\x15+\xa9]\xf9<\xa4\xba\x9e\xd3\xd9\t\x7f\xcc\x9a\x98\x80%h\x878}\xaa\xf8(\xc1h\x9b\x91\x9b\xd8O\xa9Q\xea\xf3C\xc2\'o\xe6\x85\v\x8e\x81\x1e~I1\x06\x16*b\xad6\xbf\x85K\x8c\x14\xae\xa9M\xeb\xe1\x8c:\xe9\xf1\xbb\xdd]\xeaJ9\xab\x02\xe7\xa6S\v\xc5\xbc\x83\xcc\x82\x99\x99BXgd\xb6\x88\x97`Z\xa4\x81:]\xee\xb1\'Bd\xd6\xdc\x06\xb4S\xb9d\r\xd0h!r\xed\xf9]]a\xc8\xe1\xedx\x81\x90\xd7\t\xd5\x9f\xed\xe06+\xde\x8c\xe6\n:\xe8\xff\x9f\xf5\xec\xe9qof\xf3P\xb4\xf2\xcd\xda\xe9\x1c\x8c\xb6\x84k\x00'/252, 0x2d9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2900000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="48040000a98172d417dcf359b73b4dac3ad9c0c8865bd0df1aa01d5b091619f1cbe0e763c2d8c3d25f4bdd4b12f6f5105c9760b850809d21de2c61994f259990775ce8ec25ca72b66663b99c9176b85582e568", @ANYBLOB="000225bd7000fcdbdf257e000000060066004e2000000400d1000500e40003000000050039017f00000008004d0103000000060065000200000005002f012c000000"], 0x48}}, 0x20040810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000000000000001) setsockopt$auto(0xffffffffffffffff, 0x1e2, 0x31, 0x0, 0x37) 24.706262308s ago: executing program 5 (id=2737): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000082) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm0c/sub1/sw_params\x00', 0x40280, 0x0) r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r0, &(0x7f0000000040), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={"17e400", 0x5, 0x6, 0x2, 0x6, 0xc, "0200000002000000997e763f222ce1", '\x00', "0001410c", "15e5ffdd", ["dc9667710095f436c50060c1", "70d9a9a3af9f39d000000001", "0000000000000000cec56f11", "008000"]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000280), 0x109201, 0x0) r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000004780), 0x800, 0x0) read$auto_page_owner_stack_operations_page_owner(r3, &(0x7f00000047c0)=""/190, 0xbe) ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x7, 0x1, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000700)={{&(0x7f0000000440)="533f1f1f9e90ac6dbbdcd12a8f4824afdb1f109b981e63189f98936f9cabc57ae7b1410741ac79eca92414564a26d136bac1aaf34487331dace7d63f7ed930814be23a605e0a4173f0d3bee3e1b851adb38d84da7de30295d41389", 0x3, &(0x7f00000005c0)={&(0x7f00000004c0)="804530dc6c0695f437a6660328d4971975800387cf56166765c82110e85b0662c1f50806803b6fa98d0b0583dc67857cf7fd7f02608b0537e803253f4a60d7275c19b0c2ddd0fc1ef266d3475d0211907433c2b8b3fc90bc306fbd0772a67bd2e6d373458cad2706e9f8dbcf1ddd762b6bb26b4e2bc42bd1085162383d873777310d45543a00f8fe48827a8e30de3361e30cdd1554e07263f74ce7c2ae357869d86f1ca97c00d2110080b4b643b2628eeec0d80acca0db4c2f7ccdbb4533285f364df9b7b2445c867fc7f7597d4db0dca14623c1bf6e", 0x7}, 0xd000000000000000, &(0x7f0000000600)="7cba622247dd6c3e43d78126fd9f299dafa30182c4dca3aad6a994761355d3dd4010b0da0125419eb54990b5d670d6f96785f818e5c3d37096d6cc4df9144867fc55a09845b022f948b5e15350d7ad66bcf73b7964c624e8d28336fe14f953089706bf6715687921545de774fa582d32ab53cc9e1ea5a85f4b7a40c889bef2163437b175404d525888ef166b0712977b55aeea820f55a5998a5b4ce83d85ebfa2d0a36070a9cf35d3065d0daa3015750dd7c9a9034198bbe8ca8832012efb9ff4813f3230ecd8b6cd189bfef628061c69331849ae845bfcc68686592af4a718e100d3f5a9cb9e7e3cf75d927", 0x9, 0xc2}, 0x7}, 0x101, 0x401) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/comedi\x00', 0xa0000, 0x0) pread64$auto(r4, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) r5 = socket(0xa, 0x5, 0x84) getsockopt$auto(r5, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) r6 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r6) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) 23.019329331s ago: executing program 5 (id=2739): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@query={@target_fd=r0, 0x1, 0x86e6, 0x9, 0x63, @count=0x4, 0x0, 0x6, 0x2, 0x10004, 0xb716}, 0xc) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x3, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) epoll_ctl$auto(r1, 0x7, r1, &(0x7f0000000000)={0x5, 0x6}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0xa, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) 22.031840157s ago: executing program 5 (id=2742): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) mmap$auto(0x20000000000101, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x100000001) close_range$auto(r0, r0, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x4a040, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x2002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) statmount$auto(0x0, &(0x7f0000003140)={0x8, 0x1, 0x9, 0x3, 0x13, 0x9, 0x1ffe0, 0xfffff75b, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180)) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r2, 0x80044dff, &(0x7f0000000500)="abea1d71a22c2fb47a06ba2bf74770129de95f60df18198cbb6b7c63d1dc26560bf6d396320c7c001b03e8532e8cc9fded75360724716eab7bb45d899f44452bf543d452757a01dc0526e09ad69a34b6ea5b450e0a502f5c8d7fd9ab35c18a010984f5c84b24c94090f029f95ed37dbf4c1036ad0d41847ace2f390aea14004cebc87293069ac84bec173366d2f85305b4b5347443eb925aaa34d0726444e36d0231d2f287ad90b7c6851144") write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000003c0)="b279955e4013afa38f61fdb82048872607e46a4f0ed2e5aa628fd4ed2d9fd60547d77b523fd64b5ba6cbc1f909d70bc4602514df00000000000000077d19ab4d74b19c7ad7a0e3bd503484f0db260d43573454da810a5d9c28000000000000000727009018be8b3d29a61e92fd728fa8c8de0252ad248088e4e90c1313acb8e007914055bf856ff060377b20b6e9111b0f711cf6e0c20a7ccc1ef474fc73b47c3564e65b49e349aa4d9bc5093cbab0373b18efa3fd612259fbf0d229ada875ed3bd422eb1b1f6bb71eeb85c4af34c4a725b4a98039908915dd6137b032668b330239733f69ee31870fafea", 0xeb) close_range$auto(0x2, 0x8000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) madvise$auto(0x2, 0xfffffffffffffff9, 0xffff) 20.273723431s ago: executing program 5 (id=2743): socket(0xa, 0x3, 0x3b) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socket(0x11, 0x2, 0x300) (rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async, rerun: 32) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0x202, 0x0) (rerun: 32) sendfile$auto(r1, r1, 0x0, 0x7fffe000) (async, rerun: 32) mmap$auto(0x8000000005e2, 0x4, 0x6, 0xeb1, r0, 0xfffffffffffffffe) (rerun: 32) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) (async, rerun: 64) ioctl$auto(r0, 0x7608, r0) (rerun: 64) 19.805640011s ago: executing program 5 (id=2745): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0x800000000007, 0x0) getdents$auto(r0, 0x0, 0x62d4) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/48, 0x30) getpid() accept4$auto(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x307, @local}, &(0x7f00000000c0)=0xcfd, 0xfffffffb) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0xd, 0x0, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r5, 0xa, 0x1) linkat$auto(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x3) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, 0x0, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x88800, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x2, 0x8000000000000011, 0xfffffffffffffff7, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, 0x0) r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), 0xffffffffffffffff) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r9, 0xc1b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7a5}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x8}, @GTPA_LINK={0x8, 0x1, 0xfffffff8}, @GTPA_TID={0xc, 0x3, 0x8000000000000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 18.962322565s ago: executing program 5 (id=2748): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socketcall$auto(0x9, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r0 = prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x2, 0x1ff) unshare$auto(0x8000000) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) semget$auto(0x0, 0x2e4a, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x2, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c1, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x7, 0x800002, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0xc3, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xffdffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYBLOB="57f63dd0c8cfed87480327f4dcb09335da3a61dc4e1f8d297d01c16a0785d3e6f79c"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) 14.373853406s ago: executing program 7 (id=2752): mmap$auto(0x0, 0x0, 0xe2, 0xeb1, 0xffffffffffffffff, 0x7ffc) getpid() gettid() mmap$auto(0x9, 0x400008, 0xdf, 0x38eac6f8, 0x2, 0xdd) r0 = socket(0x2, 0x1, 0x80000000) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, 0xffffffffffffffff, 0x5e58) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x408802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x11, 0x2, 0x0) io_setup$auto(0x7, &(0x7f0000000580)) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) lseek$auto(0xffffffffffffffff, 0xfffffffffffffffd, 0x1) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_gtp(0x0, r0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xf4c) close_range$auto(0x2, r2, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x9, 0x1, 0xfffbff7f, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66d54a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x4, 0xffff4e8b, 0x2, 0x1}, 0x7) r3 = socket(0x28, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) r4 = socket(0x28, 0xa, 0x4) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0xffffffffffffffff, 0x1, 0xffffffffffff7fff, 0x936, r3, 0x7ff7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) 14.340319285s ago: executing program 37 (id=2727): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/audio1\x00', 0x101800, 0x0) r0 = socket(0x2, 0x2, 0x1) r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xd}, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc2602, 0x0) r2 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim6/udp_ports_open_only\x00', 0x800, 0x0) read$auto_dfs_sched_itmt_fops_itmt(r2, &(0x7f0000000340)=""/242, 0xf2) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r3, 0x400454ca, 0x38) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r5 = socket(0xa, 0x1, 0x84) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000440), r5) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082bbd7000fddbdf251c0000001400138008008800", @ANYRES32=r0, @ANYBLOB="08008500ac1414aa05000a00040000008555959358036db8239d38631dad70bd080004000008000008001e00020000000a000e00297d0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4850) getpid() write$auto(0xca, &(0x7f0000000100)='\x044\x01\xafn\xff\xf7\xf8{\x00\x00\x00\x002\xc7S\b[u\x85E\x9c\xaf\xa5\x92\xb3\x89mB\x18\x1e\xc2\x03\x00\x00\x00\x13\r{\xad\x9f\xa7\x14W\xbd\x0e!\xe8\xa6#8\x10\xef\x82\x01Q\x8eL\xcc\xb6\xbb=\xc6\xad\x0f\xc7\xbb\t\xc2\x14\xafWU~;\xbbj\xf4\x15+\xa9]\xf9<\xa4\xba\x9e\xd3\xd9\t\x7f\xcc\x9a\x98\x80%h\x878}\xaa\xf8(\xc1h\x9b\x91\x9b\xd8O\xa9Q\xea\xf3C\xc2\'o\xe6\x85\v\x8e\x81\x1e~I1\x06\x16*b\xad6\xbf\x85K\x8c\x14\xae\xa9M\xeb\xe1\x8c:\xe9\xf1\xbb\xdd]\xeaJ9\xab\x02\xe7\xa6S\v\xc5\xbc\x83\xcc\x82\x99\x99BXgd\xb6\x88\x97`Z\xa4\x81:]\xee\xb1\'Bd\xd6\xdc\x06\xb4S\xb9d\r\xd0h!r\xed\xf9]]a\xc8\xe1\xedx\x81\x90\xd7\t\xd5\x9f\xed\xe06+\xde\x8c\xe6\n:\xe8\xff\x9f\xf5\xec\xe9qof\xf3P\xb4\xf2\xcd\xda\xe9\x1c\x8c\xb6\x84k\x00'/252, 0x2d9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2900000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="48040000a98172d417dcf359b73b4dac3ad9c0c8865bd0df1aa01d5b091619f1cbe0e763c2d8c3d25f4bdd4b12f6f5105c9760b850809d21de2c61994f259990775ce8ec25ca72b66663b99c9176b85582e568", @ANYBLOB="000225bd7000fcdbdf257e000000060066004e2000000400d1000500e40003000000050039017f00000008004d0103000000060065000200000005002f012c000000"], 0x48}}, 0x20040810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000000000000001) setsockopt$auto(0xffffffffffffffff, 0x1e2, 0x31, 0x0, 0x37) 13.244787267s ago: executing program 7 (id=2755): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x6, 0x8001, 0xffffffff) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x6, 0x6, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) socket(0x18, 0x800, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x6358c0, 0x0, 0x1c) socket(0x2, 0x1, 0x106) setfsuid$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0x3, 0x20ebf, 0xff1, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) epoll_create$auto(0x3e) 10.030877309s ago: executing program 7 (id=2760): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7fffefff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000840) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 7.282904351s ago: executing program 8 (id=2763): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) close_range$auto(0x0, r0, 0x2) socket(0x15, 0x5, 0x0) mmap$auto(0x20000000000101, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x9, 0x1ffe0, 0xfffff75b, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000080)="6945bd1df6fca293dd46eec12796e1b7d1e0861d7c839d04bbaa1428451a1a86fc4fa37d90ef6777f201a42989f7520c882c1c43", 0x7, 0xa505}, 0x802}, 0x7, 0x4008) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7c8, 0x1, 0x9, 0x7, 0x3e, 0x3ff, 0x1ffde, 0x7, 0xa, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0xffffffff, 0x81, 0x0, 0x8bb, 0x0, 0x0, 0x0, [0x1000000001, 0x800000000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7324, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2020]}, 0x5, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) socket(0xa, 0x1, 0x84) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.9066075s ago: executing program 7 (id=2764): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0x800000000007, 0x0) getdents$auto(r0, 0x0, 0x62d4) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/location\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) getpid() accept4$auto(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x307, @local}, &(0x7f00000000c0)=0xcfd, 0xfffffffb) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0xd, 0x0, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r5, 0xa, 0x1) linkat$auto(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x3) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, 0x0, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x88800, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x2, 0x8000000000000011, 0xfffffffffffffff7, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, 0x0) r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), 0xffffffffffffffff) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r9, 0xc1b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7a5}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x8}, @GTPA_LINK={0x8, 0x1, 0xfffffff8}, @GTPA_TID={0xc, 0x3, 0x8000000000000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 6.440721132s ago: executing program 8 (id=2765): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = eventfd$auto(0x4) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0) setsockopt$auto_SO_DETACH_FILTER(r2, 0x3, 0x1b, &(0x7f0000000200)='\x00', 0x77e) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="040029bd7000ffdbdf2504000000080001009be4fd4b340003002f7379732f6b65726e656c2f74726163696e672f7065725f6370752f637075302f74726163655f706970655f7261"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) ioctl$auto(r2, 0x4008af21, r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/README\x00', 0x8481, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/netdevsim/netdevsim7/hwstats/l3/disable_ifindex\x00', 0x242c0, 0x0) pwritev$auto(r5, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000280)={@siginfo_0_0={0x4, 0x8, 0xffff, @_kill={0x0, 0xee01}}}, 0x8, &(0x7f0000000300)={{0x140000000, 0xdfdc}, {0x3, 0x9}, 0x9, 0x5, 0x4, 0x1000000000, 0x2, 0xf, 0xfffffffffffffffe, 0x5, 0x1, 0x81, 0x7, 0x2d7, 0x4, 0xfffffffffffffffb}) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f00000003c0)={0x4, 0x2, 0x2, 0x5, 0x5, 0xffffffffffffffff}) shmctl$auto_IPC_RMID(0x800, 0x0, &(0x7f00000022c0)={{0x1, 0x0, 0x0, 0x2, 0x7, 0xa, 0x1a}, 0x1, 0x8000000000000000, 0x0, 0xe67, @raw=0x4, @inferred=0xffffffffffffffff, 0xb80, 0x0, &(0x7f0000000400)="43a44c9c0ed91c824ba615910d6038e556d57c89eb5d379c814cd067a9191381983c62242f7e", &(0x7f00000012c0)="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"}) rt_sigqueueinfo$auto_SIGCONT(r6, 0x12, &(0x7f0000002340)={@siginfo_0_0={0x2, 0xffffea4b, 0x16, @_kill={r7, r8}}}) r9 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) prctl$auto(0x44, 0x5, 0x0, 0x8, 0x863) open_by_handle_at$auto(r9, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r4, r4, 0x0, 0x2) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.051391565s ago: executing program 8 (id=2766): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb3, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "0037ff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x4e4, 0x0, 0x1, 0x4}}, 0x92) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) timer_create$auto(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x3a) getgroups$auto(0x7fd, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) execveat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$auto_IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, 0x0) 4.910756743s ago: executing program 8 (id=2767): gettimeofday$auto(&(0x7f00000015c0)={0x9, 0x2}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) syz_clone3(&(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) readv$auto(r1, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x100000000000037, 0x0) close_range$auto(0x0, 0x5, 0x4) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x8, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x40000) setsockopt$auto_SO_RCVLOWAT(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000000c0)='/dev/sg0\x00', 0xfffffffa) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$auto(r2, 0x11, 0x64, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x5453, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.33547956s ago: executing program 38 (id=2748): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socketcall$auto(0x9, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r0 = prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x2, 0x1ff) unshare$auto(0x8000000) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) semget$auto(0x0, 0x2e4a, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x2, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c1, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x7, 0x800002, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0xc3, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xffdffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYBLOB="57f63dd0c8cfed87480327f4dcb09335da3a61dc4e1f8d297d01c16a0785d3e6f79c"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) 3.281451819s ago: executing program 7 (id=2769): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd11/queue/optimal_io_size\x00', 0x22100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x3, 0x15f4da0a, 0x7, 0x9, 0x62, 0x3, 0x400000000000005, 0x6d3f, 0x6, 0x6, 0x5]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffd6e, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x10, 0x3, 0x6) socket(0x2, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x200004, 0x525, 0x40eb2, 0xd, 0x300000000000) r1 = socket(0xa, 0x801, 0x106) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'vlan0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080f4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) getsockopt$auto(r1, 0x6, 0x5, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/pages_unshared\x00', 0x8400, 0x0) 2.844009862s ago: executing program 8 (id=2770): mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec4\x00', 0x800, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, 0x0, 0x808) r3 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x12, r3, 0x2) getrlimit$auto(0x4, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) ioctl$auto_TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)=0x1000) r5 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_make_request/space\x00', 0x48981, 0x0) write$auto(r5, &(0x7f0000000200)='0\x00\xa6C\x1b\xad\xb1\x9e\xc8Tt\xa8\x87\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\xaf\x14\x8a\xcf\xe8\xe8,-d\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xf6\xf1\xe9\x17\xb3\xc1\x13\x00\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3Ch\x03&\x1c\r&\xf9i\xa8\x01\xdbBr\'\x83\'d`\x05\x10\x9d\x8f*E\xfb\x9c\rTD\xa3\xc5\x1bWZ\xb8Q7]E\x84v\x17M\xd3\xf3\x1c\xd4.\vA\xad\x88\x85\xe3vi\xd6', 0x4) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r6) sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="01032cb57000fbdbdf250a0000000600010018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x48d0) 1.359096287s ago: executing program 7 (id=2771): madvise$auto(0x0, 0x8000000000000000, 0x15) syz_clone(0x20000100, &(0x7f0000000000)="de49e21e68f85c175a54f6160c0765ded9f234faa422ccc6186d7410e3989825c0115d0e280b304bf2b9f7c0efd682040fb562c330356580361a3f70ff9eee51ab1d4d22f89ecae628428b4553f38acbfb8a8ce738b3", 0x56, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0xfd, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r0, 0x9, 0x820e, 0x8b, 0x0, 0x18) r1 = ioctl$auto_TUNSETLINK(0xffffffffffffffff, 0x400454cd, &(0x7f0000000200)=0x10) madvise$auto(0x4a07, 0x0, 0x4) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000280)={0x6, r2}) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c000100", @ANYRES16=r5, @ANYBLOB="000427bd7000ffdbdf2502000000060002002d7d000008000300ec04000040001900ba6956c040b24e61fd790864b89d5d478f553778d58e857f6106b1aa8c380417ffb67a4dc93f9ab421cc75d119ceba755f98131c9c2896d351386f6a05000c0005000000080015000900000008001e0004000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 8 (id=2772): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/max_vfs\x00', 0x48002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000300)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xa4\xbc^Zo\xf4\xaf:\x00\x00\x00\x00\x00\x00*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d\xbcc!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xc4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xf7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85HC /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\x9bA\xac\x9c\x8e\r(\x1d\x98\x84\x98\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6=9\x91\xb6\xf7\xa1=\x96\x11\xf11\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xc9e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbds\x11\x98}\x8d\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2Ln\xafQ~L\xac#\xae{\xee2\x9d\xd6', 0x7fffffff) write$auto(r0, 0x0, 0xc8) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0) socketpair$auto(0x1e, 0x1ff, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x18801, 0x0) unshare$auto(0x40000080) prctl$auto_PR_SET_UNALIGN(0x6, 0x2, 0x9, 0x3, 0x2) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x20) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) mmap$auto(0x0, 0x400, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mremap$auto(0x200001000000, 0x0, 0x9, 0x6, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x1, 0x5, 0x3, 0x2fc, 0x7, 0x28000) kernel console output (not intermixed with test programs): x40/0x90 [ 870.448935][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.448960][T17092] RIP: 0033:0x7f546959ce59 [ 870.448980][T17092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.449003][T17092] RSP: 002b:00007f546a41c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 870.449026][T17092] RAX: ffffffffffffffda RBX: 00007f5469815fa0 RCX: 00007f546959ce59 [ 870.449042][T17092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 870.449056][T17092] RBP: 00007f5469632e6f R08: 0000000000000000 R09: 0000000000000000 [ 870.449071][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.449085][T17092] R13: 00007f5469816038 R14: 00007f5469815fa0 R15: 00007ffdeb09a6c8 [ 870.449115][T17092] [ 871.067604][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.075758][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.009508][T17110] netlink: 'syz.0.2127': attribute type 3 has an invalid length. [ 873.151785][T17133] can: request_module (can-proto-0) failed. [ 875.959304][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 876.201024][T17187] vivid-007: ================= START STATUS ================= [ 876.237285][T17187] vivid-007: Enable Output Cropping: true grabbed [ 876.314576][T17187] vivid-007: Enable Output Composing: true grabbed [ 876.350863][T17187] vivid-007: Enable Output Scaler: true grabbed [ 876.428578][T17187] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 876.512155][T17187] vivid-007: Transmit Mode: HDMI grabbed [ 876.587789][T17187] vivid-007: Hotplug Present: 0x00000000 [ 876.669772][T17187] vivid-007: RxSense Present: 0x00000000 [ 876.772645][T17187] vivid-007: EDID Present: 0x00000000 [ 876.851144][T17187] vivid-007: ================== END STATUS ================== [ 877.212238][T17189] syz.0.2143(17189): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 878.303928][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 878.518063][T17211] FAULT_INJECTION: forcing a failure. [ 878.518063][T17211] name failslab, interval 1, probability 0, space 0, times 0 [ 878.667713][T17211] CPU: 0 UID: 0 PID: 17211 Comm: syz.0.2147 Tainted: G U L syzkaller #0 PREEMPT(full) [ 878.667755][T17211] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 878.667765][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.667780][T17211] Call Trace: [ 878.667787][T17211] [ 878.667796][T17211] dump_stack_lvl+0x100/0x190 [ 878.667831][T17211] should_fail_ex.cold+0x5/0xa [ 878.667862][T17211] should_failslab+0xc2/0x120 [ 878.667898][T17211] __kmalloc_noprof+0xfc/0x820 [ 878.667928][T17211] ? alloc_pipe_info+0x1ec/0x590 [ 878.667959][T17211] alloc_pipe_info+0x1ec/0x590 [ 878.667988][T17211] splice_direct_to_actor+0x78f/0xa30 [ 878.668016][T17211] ? __pfx_direct_splice_actor+0x10/0x10 [ 878.668044][T17211] ? __pfx_aa_file_perm+0x10/0x10 [ 878.668075][T17211] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 878.668110][T17211] do_splice_direct+0x174/0x240 [ 878.668136][T17211] ? __pfx_do_splice_direct+0x10/0x10 [ 878.668163][T17211] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 878.668213][T17211] ? rw_verify_area+0xce/0x6d0 [ 878.668257][T17211] do_sendfile+0xadc/0xe20 [ 878.668302][T17211] ? __pfx_do_sendfile+0x10/0x10 [ 878.668340][T17211] ? __fget_files+0x21f/0x3d0 [ 878.668365][T17211] ? __x64_sys_futex+0x34f/0x4d0 [ 878.668398][T17211] ? __x64_sys_futex+0x358/0x4d0 [ 878.668429][T17211] __x64_sys_sendfile64+0x1d8/0x220 [ 878.668458][T17211] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 878.668495][T17211] do_syscall_64+0x115/0x840 [ 878.668527][T17211] ? clear_bhb_loop+0x40/0x90 [ 878.668556][T17211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.668581][T17211] RIP: 0033:0x7f546959ce59 [ 878.668600][T17211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.668624][T17211] RSP: 002b:00007f546a41c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 878.668646][T17211] RAX: ffffffffffffffda RBX: 00007f5469815fa0 RCX: 00007f546959ce59 [ 878.668662][T17211] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 878.668677][T17211] RBP: 00007f5469632e6f R08: 0000000000000000 R09: 0000000000000000 [ 878.668691][T17211] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 878.668705][T17211] R13: 00007f5469816038 R14: 00007f5469815fa0 R15: 00007ffdeb09a6c8 [ 878.668735][T17211] [ 879.803855][T17210] Process accounting resumed [ 884.078127][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 885.199846][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 886.702571][T17341] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2172'. [ 886.726908][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2175'. [ 886.755038][ T30] audit: type=1800 audit(2147483685.570:31): pid=17347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2173" name="dbroot" dev="configfs" ino=75792 res=0 errno=0 [ 886.837530][T17355] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2176'. [ 888.654735][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2181'. [ 890.517696][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2188'. [ 893.881203][T17479] serio: Serial port pty173 [ 894.493704][T17483] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 895.594637][T17511] netlink: 'syz.0.2214': attribute type 22 has an invalid length. [ 895.664123][T17511] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2214'. [ 895.826398][T17507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2214'. [ 895.932919][T17507] macvlan0: entered promiscuous mode [ 895.955788][T17507] macvlan0: entered allmulticast mode [ 895.980259][T17507] veth1_vlan: entered allmulticast mode [ 896.321467][T17523] FAULT_INJECTION: forcing a failure. [ 896.321467][T17523] name failslab, interval 1, probability 0, space 0, times 0 [ 896.409512][T17523] CPU: 0 UID: 0 PID: 17523 Comm: syz.0.2208 Tainted: G U L syzkaller #0 PREEMPT(full) [ 896.409554][T17523] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 896.409563][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.409578][T17523] Call Trace: [ 896.409585][T17523] [ 896.409594][T17523] dump_stack_lvl+0x100/0x190 [ 896.409629][T17523] should_fail_ex.cold+0x5/0xa [ 896.409661][T17523] should_failslab+0xc2/0x120 [ 896.409696][T17523] __kmalloc_noprof+0xfc/0x820 [ 896.409726][T17523] ? ima_alloc_init_template+0xb6/0x6d0 [ 896.409757][T17523] ima_alloc_init_template+0xb6/0x6d0 [ 896.409788][T17523] ima_store_measurement+0x1e3/0x5b0 [ 896.409815][T17523] ? __pfx_ima_store_measurement+0x10/0x10 [ 896.409877][T17523] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 896.409919][T17523] process_measurement+0x19cc/0x2350 [ 896.409968][T17523] ? __pfx_process_measurement+0x10/0x10 [ 896.410009][T17523] ? find_held_lock+0x2b/0x80 [ 896.410040][T17523] ? rcu_read_unlock+0x17/0x60 [ 896.410077][T17523] ? rcu_read_unlock+0x17/0x60 [ 896.410119][T17523] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 896.410181][T17523] ? seq_open+0x116/0x170 [ 896.410213][T17523] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 896.410240][T17523] ? single_open+0x15f/0x1d0 [ 896.410277][T17523] ima_file_check+0xcc/0x120 [ 896.410315][T17523] ? __pfx_ima_file_check+0x10/0x10 [ 896.410363][T17523] security_file_post_open+0xc4/0x210 [ 896.410391][T17523] path_openat+0x985/0x4280 [ 896.410431][T17523] ? __pfx_path_openat+0x10/0x10 [ 896.410464][T17523] do_file_open+0x20e/0x430 [ 896.410490][T17523] ? __pfx_do_file_open+0x10/0x10 [ 896.410535][T17523] ? alloc_fd+0x471/0x7a0 [ 896.410560][T17523] ? do_getname+0x191/0x390 [ 896.410604][T17523] do_sys_openat2+0x10f/0x1e0 [ 896.410637][T17523] ? __pfx_do_sys_openat2+0x10/0x10 [ 896.410672][T17523] ? __fget_files+0x21f/0x3d0 [ 896.410700][T17523] __x64_sys_openat+0x12d/0x210 [ 896.410733][T17523] ? __pfx___x64_sys_openat+0x10/0x10 [ 896.410778][T17523] do_syscall_64+0x115/0x840 [ 896.410810][T17523] ? clear_bhb_loop+0x40/0x90 [ 896.410840][T17523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.410872][T17523] RIP: 0033:0x7f546959ce59 [ 896.410891][T17523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.410916][T17523] RSP: 002b:00007f546a41c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 896.410938][T17523] RAX: ffffffffffffffda RBX: 00007f5469815fa0 RCX: 00007f546959ce59 [ 896.410954][T17523] RDX: 0000000000000442 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 896.410970][T17523] RBP: 00007f5469632e6f R08: 0000000000000000 R09: 0000000000000000 [ 896.410984][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.410999][T17523] R13: 00007f5469816038 R14: 00007f5469815fa0 R15: 00007ffdeb09a6c8 [ 896.411029][T17523] [ 897.070588][T17531] capability: warning: `syz.2.2210' uses 32-bit capabilities (legacy support in use) [ 897.080208][ T30] audit: type=1804 audit(2147483695.705:32): pid=17523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.2208" name="/newroot/sys/kernel/tracing/trace_options" dev="tracefs" ino=3559 res=0 errno=0 [ 898.142193][ T30] audit: type=1804 audit(2147483696.955:33): pid=17549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2211" name="file0" dev="tmpfs" ino=3061 res=1 errno=0 [ 898.551473][T17565] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2217'. [ 898.747596][ T50] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 899.647925][T17584] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2228'. [ 899.932562][ T50] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 901.004727][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 901.657567][T17616] netlink: 'syz.2.2230': attribute type 14 has an invalid length. [ 901.704638][T17616] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2230'. [ 901.916482][T17622] __vm_enough_memory: pid: 17622, comm: syz.3.2232, bytes: 4398046457856 not enough memory for the allocation [ 903.236642][T17646] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2235'. [ 903.308324][T17623] Process accounting resumed [ 903.419964][ T50] Bluetooth: hci1: Unexpected cc 0x7c89 with no status syzkaller syzkaller login: [ 906.390541][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 908.454069][T17138] Bluetooth: hci1: command 0x0406 tx timeout [ 909.880119][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'. [ 910.539214][T17138] Bluetooth: hci1: command 0x0406 tx timeout [ 912.473315][T17813] netlink: 'syz.1.2266': attribute type 14 has an invalid length. [ 912.532043][T17813] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2266'. [ 913.935784][T17793] Process accounting resumed [ 914.408881][T17849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 914.683107][T17849] tunl0: entered promiscuous mode [ 914.707773][T17849] tunl0: entered allmulticast mode [ 917.061790][T17890] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2286'. [ 917.644153][T17896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2288'. [ 917.683544][T17898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2288'. [ 917.786361][T17896] ipvlan1: entered promiscuous mode [ 917.803440][T17896] ipvlan1: entered allmulticast mode [ 917.826926][T17896] veth0_vlan: entered allmulticast mode [ 918.218218][T10961] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 9 with max blocks 5 with error 117 [ 918.305898][T10961] EXT4-fs (sda1): This should not happen!! Data will be lost [ 918.305898][T10961] [ 918.598873][T17911] netlink: 'syz.3.2280': attribute type 14 has an invalid length. [ 918.618113][T17911] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2280'. [ 919.803271][T17931] netlink: ct_mark mask cannot be 0 [ 922.936579][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 923.570797][T17999] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 924.114410][T17138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 924.133406][T17138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 924.141331][T17138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 924.151808][T17138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 924.165958][T17138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 925.768233][T10968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.209493][T10968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.224884][T17138] Bluetooth: hci4: command tx timeout [ 926.250177][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2300'. [ 926.411737][T18030] veth0_macvtap: left allmulticast mode [ 926.472805][T18030] veth0_macvtap: left promiscuous mode [ 926.686637][T10968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.913398][T10968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.717624][T10968] bridge_slave_1: left allmulticast mode [ 927.749043][T10968] bridge_slave_1: left promiscuous mode [ 927.772362][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.793837][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 927.854470][T10968] bridge_slave_0: left allmulticast mode [ 927.871785][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 927.889805][T18043] netlink: 202 bytes leftover after parsing attributes in process `syz.0.2303'. [ 927.899114][T10968] bridge_slave_0: left promiscuous mode [ 927.921236][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.933239][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 927.981426][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.028365][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.082313][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.132930][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.194466][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.240229][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.298028][T18045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.309266][T17138] Bluetooth: hci4: command tx timeout [ 928.750713][T10968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.786707][T10968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.828481][T10968] bond0 (unregistering): Released all slaves [ 929.030876][T10968] : left promiscuous mode [ 929.343274][T10968] HfR: left promiscuous mode [ 929.651821][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 930.386186][T17138] Bluetooth: hci4: command tx timeout [ 930.534230][T18003] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.592720][T18003] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.639059][T18003] bridge_slave_0: entered allmulticast mode [ 930.693436][T18003] bridge_slave_0: entered promiscuous mode [ 930.746988][T18003] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.794160][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.833506][T18003] bridge_slave_1: entered allmulticast mode [ 930.874628][T18003] bridge_slave_1: entered promiscuous mode [ 931.224167][T18003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.380638][T18003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.808764][T18003] team0: Port device team_slave_0 added [ 931.942578][T18003] team0: Port device team_slave_1 added [ 931.978403][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 932.200900][T18003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.229387][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.237529][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.254125][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.367636][T18003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.420121][T18003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.452126][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.484285][T17138] Bluetooth: hci4: command tx timeout [ 932.576824][T18003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.199320][T18003] hsr_slave_0: entered promiscuous mode [ 933.233841][T18003] hsr_slave_1: entered promiscuous mode [ 933.261877][T18003] debugfs: 'hsr0' already exists in 'hsr' [ 933.291964][T18003] Cannot create hsr debugfs directory [ 935.071282][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 935.173218][T10968] hsr_slave_0: left promiscuous mode [ 935.192160][T10968] hsr_slave_1: left promiscuous mode [ 935.242592][T10968] veth1_macvtap: left allmulticast mode [ 935.259185][T10968] veth1_macvtap: left promiscuous mode [ 935.274874][T10968] veth0_macvtap: left promiscuous mode [ 935.292272][T10968] veth1_vlan: left promiscuous mode [ 935.303021][T10968] veth0_vlan: left promiscuous mode [ 935.395003][T18171] random: crng reseeded on system resumption [ 935.511114][T18171] hub 1-0:1.0: USB hub found [ 935.549437][T18171] hub 1-0:1.0: 1 port detected [ 935.867161][T10968] team0 (unregistering): Port device team_slave_1 removed [ 935.913316][T10968] team0 (unregistering): Port device team_slave_0 removed [ 936.916461][T18180] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2320'. [ 938.783824][T18216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 940.364322][T18003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 940.426295][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 940.478365][T18003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 940.535027][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 940.585333][T18003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 940.683172][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 940.713340][T18003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 940.785578][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.257533][T10968] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 9 with max blocks 15 with error 117 [ 941.342245][T10968] EXT4-fs (sda1): This should not happen!! Data will be lost [ 941.342245][T10968] [ 941.436288][T10968] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 24 with max blocks 77 with error 117 [ 941.510936][T10968] EXT4-fs (sda1): This should not happen!! Data will be lost [ 941.510936][T10968] [ 941.979422][T18003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.094114][T18003] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.155514][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.162713][T10968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.282602][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.289788][T10968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.454974][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2331'. [ 942.683352][ T743] bridge0: port 4(netdevsim3) entered disabled state [ 942.870081][ T743] netdevsim netdevsim0 netdevsim3 (unregistering): left allmulticast mode [ 942.913871][ T743] netdevsim netdevsim0 netdevsim3 (unregistering): left promiscuous mode [ 942.961004][ T743] bridge0: port 4(netdevsim3) entered disabled state [ 943.097676][ T743] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.585460][ T743] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.687425][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 943.705568][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 943.715186][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 943.723887][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 943.736766][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.059030][ T743] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.791195][T18344] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2336'. [ 945.833677][ T50] Bluetooth: hci0: command tx timeout [ 945.851721][T18344] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2336'. [ 946.276526][ T743] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.500591][T18003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.528901][ T743] bond0: left allmulticast mode [ 947.549364][ T743] bond_slave_0: left allmulticast mode [ 947.569214][ T743] bond_slave_1: left allmulticast mode [ 947.584785][ T743] bond0: left promiscuous mode [ 947.605611][ T743] bond_slave_0: left promiscuous mode [ 947.621189][ T743] bond_slave_1: left promiscuous mode [ 947.638471][ T743] bridge0: port 3(bond0) entered disabled state [ 947.669851][ T743] bridge_slave_1: left allmulticast mode [ 947.685872][ T743] bridge_slave_1: left promiscuous mode [ 947.698485][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.718474][ T743] bridge_slave_0: left allmulticast mode [ 947.730368][ T743] bridge_slave_0: left promiscuous mode [ 947.743856][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.895059][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 947.917532][ T50] Bluetooth: hci0: command tx timeout [ 948.098876][ T743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.116389][ T743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.136616][ T743] bond0 (unregistering): Released all slaves [ 948.276245][ T743] tipc: Left network mode [ 948.387822][T18003] veth0_vlan: entered promiscuous mode [ 948.769949][T18393] net_ratelimit: 23 callbacks suppressed [ 948.769969][T18393] netlink: ct_mark mask cannot be 0 [ 949.025128][T18306] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.061019][T18306] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.091653][T18306] bridge_slave_0: entered allmulticast mode [ 949.122679][T18306] bridge_slave_0: entered promiscuous mode [ 949.159401][T18003] veth1_vlan: entered promiscuous mode [ 949.355430][T18306] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.382871][T18306] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.421942][T18306] bridge_slave_1: entered allmulticast mode [ 949.464258][T18306] bridge_slave_1: entered promiscuous mode [ 949.994905][ T50] Bluetooth: hci0: command tx timeout [ 950.067178][T18306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.123069][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 950.174345][T18306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.365713][T18306] team0: Port device team_slave_0 added [ 950.417478][T18306] team0: Port device team_slave_1 added [ 950.570809][T18003] veth0_macvtap: entered promiscuous mode [ 950.602085][T18306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.623481][T18306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.716783][T18306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.758326][ T743] hsr_slave_0: left promiscuous mode [ 950.775526][ T743] hsr_slave_1: left promiscuous mode [ 950.798680][ T743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.832431][ T743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.877178][ T743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.907252][ T743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.976581][ T743] veth1_vlan: left allmulticast mode [ 951.006018][ T743] veth1_vlan: left promiscuous mode [ 951.028773][ T743] veth0_vlan: left promiscuous mode [ 951.797192][ T743] team0 (unregistering): Port device team_slave_1 removed [ 951.836959][ T743] team0 (unregistering): Port device team_slave_0 removed [ 952.076003][ T50] Bluetooth: hci0: command tx timeout [ 952.110926][T18306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.141012][T18306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.184455][T18306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.205142][T18003] veth1_macvtap: entered promiscuous mode [ 952.232574][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 952.404344][T18306] hsr_slave_0: entered promiscuous mode [ 952.435645][T18306] hsr_slave_1: entered promiscuous mode [ 952.650103][T18003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.085306][T18003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.331824][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.370210][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.488826][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.528815][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.500539][T10968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.552173][T10968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.782615][T10968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.811058][T10968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.667834][T18494] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2353'. [ 956.355324][T18306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.394772][T18306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.551577][T18306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.612270][T18306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.701096][T18306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 956.777250][T18306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 956.820270][T18306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 956.921132][T18306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 956.945977][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 957.516569][T18306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.542059][T18520] ima: policy update failed [ 957.571439][ T30] audit: type=1802 audit(2147483756.355:34): pid=18520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2357" res=0 errno=0 [ 957.857378][T18542] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 957.945432][T18306] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.031796][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.039020][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.117159][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.124334][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.164708][T18569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2362'. [ 960.020766][T18594] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 960.129987][T18598] netlink: ct_mark mask cannot be 0 [ 960.405722][T18306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.759862][ T30] audit: type=1800 audit(2147483759.533:35): pid=18610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2368" name=22050820 dev="tmpfs" ino=1167 res=0 errno=0 [ 960.895652][T18306] veth0_vlan: entered promiscuous mode [ 961.063965][T18306] veth1_vlan: entered promiscuous mode [ 961.214877][T18306] veth0_macvtap: entered promiscuous mode [ 961.249142][T18306] veth1_macvtap: entered promiscuous mode [ 961.317389][T18306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.367152][T18306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.406295][T10961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.434226][T10961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.546772][T10961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.796048][T10961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.917630][T18632] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2370'. [ 962.588285][T10952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.663035][T10952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.930573][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.997283][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.997994][T18678] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 964.496525][T18686] ovs_?: entered promiscuous mode [ 965.624961][T18719] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 966.893719][T18733] random: crng reseeded on system resumption [ 967.122729][T18741] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 968.206687][T18759] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 968.429129][ T30] audit: type=1800 audit(2147483767.209:36): pid=18771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2401" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 969.088170][ T187] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 969.139200][T18776] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 969.647800][T18798] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 969.655512][T18798] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 970.191763][T18815] bonding: no command found in bonding_masters - use +ifname or -ifname [ 971.241124][T18824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2409'. [ 971.264880][T18824] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2409'. [ 973.674853][T17138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 973.695726][T17138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 973.710705][T17138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 973.720406][T17138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 973.728326][T17138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.870124][T18891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2424'. [ 975.261665][T10961] team0: left allmulticast mode [ 975.285517][T10961] team_slave_0: left allmulticast mode [ 975.336722][T10961] team_slave_1: left allmulticast mode [ 975.375603][T10961] team0: left promiscuous mode [ 975.406024][T10961] team_slave_0: left promiscuous mode [ 975.443629][T10961] team_slave_1: left promiscuous mode [ 975.488463][T10961] bridge0: port 4(team0) entered disabled state [ 975.534326][T10961] veth1: left allmulticast mode [ 975.556451][T10961] veth1: left promiscuous mode [ 975.578762][T10961] bridge0: port 3(veth1) entered disabled state [ 975.621377][T10961] bridge_slave_1: left allmulticast mode [ 975.649500][T10961] bridge_slave_1: left promiscuous mode [ 975.674989][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.721223][T10961] bridge_slave_0: left allmulticast mode [ 975.756327][T10961] bridge_slave_0: left promiscuous mode [ 975.792814][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.847895][T17138] Bluetooth: hci3: command tx timeout [ 976.575890][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.613474][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.651088][T10961] bond0 (unregistering): Released all slaves [ 976.713571][T18921] warning: `syz.0.2428' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 976.846900][T10961] &#$@\]\-: left promiscuous mode [ 977.074088][T10961] HfR: left promiscuous mode [ 977.929113][T17138] Bluetooth: hci3: command tx timeout [ 978.425252][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 978.637494][T18963] WARNING! power/level is deprecated; use power/control instead [ 979.303698][T18869] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.328380][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.345951][T18869] bridge_slave_0: entered allmulticast mode [ 979.355355][T18869] bridge_slave_0: entered promiscuous mode [ 979.440812][T18869] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.448171][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.462774][T18869] bridge_slave_1: entered allmulticast mode [ 979.470663][T18869] bridge_slave_1: entered promiscuous mode [ 979.573520][T10961] hsr_slave_0: left promiscuous mode [ 979.581185][T10961] hsr_slave_1: left promiscuous mode [ 979.587125][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.595266][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.603741][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.613473][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.628977][T10961] veth1_macvtap: left allmulticast mode [ 979.637219][T10961] veth1_macvtap: left promiscuous mode [ 979.643597][T10961] veth1_vlan: left promiscuous mode [ 979.649019][T10961] veth0_vlan: left promiscuous mode [ 979.868642][T10961] team0 (unregistering): Port device team_slave_1 removed [ 979.888664][T10961] team0 (unregistering): Port device team_slave_0 removed [ 980.010183][T17138] Bluetooth: hci3: command tx timeout [ 980.057407][T18869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.121895][T18869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.376989][T18869] team0: Port device team_slave_0 added [ 980.417751][T18869] team0: Port device team_slave_1 added [ 980.587436][T18977] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2435'. [ 980.614172][T18869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.643372][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.715890][T18869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.776355][T18869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.810733][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.935423][T18869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.043426][T18991] futex_wake_op: syz.0.2439 tries to shift op by -2048; fix this program [ 981.096720][T18993] 0x000000000001-0x000000020000 : "" [ 981.187432][T18993] ftl_cs: FTL header corrupt! [ 981.367822][T18996] ubi0: attaching mtd0 [ 981.429075][T18996] ubi0: scanning is finished [ 981.461075][T18996] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 981.613451][T18996] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 981.655011][T18995] ubi0: attaching mtd0 [ 981.726112][T18995] ubi0: scanning is finished [ 981.742817][T18995] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 981.885204][T18869] hsr_slave_0: entered promiscuous mode [ 981.904090][T18869] hsr_slave_1: entered promiscuous mode [ 981.921645][T18995] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 981.931017][T18869] debugfs: 'hsr0' already exists in 'hsr' [ 981.937252][T18869] Cannot create hsr debugfs directory [ 982.090847][T17138] Bluetooth: hci3: command tx timeout [ 982.602248][T19014] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2445'. [ 983.398341][T18869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 983.457757][T18869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.495485][T18869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 983.529572][T18869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 983.569625][T18869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 983.600385][T18869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.629270][T18869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 983.660947][T18869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 984.067366][T19054] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 984.738592][T19077] random: crng reseeded on system resumption [ 984.979904][T18869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.297346][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 985.341355][T18869] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.415264][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.422498][T10968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.510839][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.518079][T10968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.365874][T18869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.645107][T18869] veth0_vlan: entered promiscuous mode [ 987.752114][T18869] veth1_vlan: entered promiscuous mode [ 987.864346][T18869] veth0_macvtap: entered promiscuous mode [ 987.901284][T18869] veth1_macvtap: entered promiscuous mode [ 987.947716][T18869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.973147][T18869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.006987][T10961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.035861][T10961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.082526][T10961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.126166][T10961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.275665][T10968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.303505][T10968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.368419][T10952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.390198][T10952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.781096][T19121] kexec: Could not allocate control_code_buffer [ 991.583680][T19156] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2472'. [ 991.657084][T19157] FAULT_INJECTION: forcing a failure. [ 991.657084][T19157] name fail_futex, interval 1, probability 0, space 0, times 0 [ 991.729175][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.2.2472 Tainted: G U L syzkaller #0 PREEMPT(full) [ 991.729217][T19157] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 991.729226][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 991.729240][T19157] Call Trace: [ 991.729249][T19157] [ 991.729258][T19157] dump_stack_lvl+0x100/0x190 [ 991.729293][T19157] should_fail_ex.cold+0x5/0xa [ 991.729327][T19157] get_futex_key+0x1d2/0x14f0 [ 991.729354][T19157] ? __pfx_get_futex_key+0x10/0x10 [ 991.729389][T19157] futex_wake+0xf4/0x5e0 [ 991.729432][T19157] ? __pfx_futex_wake+0x10/0x10 [ 991.729462][T19157] ? kasan_quarantine_put+0x104/0x240 [ 991.729495][T19157] ? putname+0xb1/0x110 [ 991.729520][T19157] ? kmem_cache_free+0x127/0x6b0 [ 991.729551][T19157] do_futex+0x2b2/0x440 [ 991.729578][T19157] ? __pfx_do_futex+0x10/0x10 [ 991.729609][T19157] ? __pfx_do_sys_openat2+0x10/0x10 [ 991.729645][T19157] ? __fget_files+0x21f/0x3d0 [ 991.729670][T19157] __x64_sys_futex+0x34f/0x4d0 [ 991.729699][T19157] ? __x64_sys_openat+0x12d/0x210 [ 991.729732][T19157] ? __pfx___x64_sys_futex+0x10/0x10 [ 991.729771][T19157] do_syscall_64+0x115/0x840 [ 991.729802][T19157] ? clear_bhb_loop+0x40/0x90 [ 991.729832][T19157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.729856][T19157] RIP: 0033:0x7f418f59ce59 [ 991.729876][T19157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.729900][T19157] RSP: 002b:00007f418d7f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 991.729923][T19157] RAX: ffffffffffffffda RBX: 00007f418f816188 RCX: 00007f418f59ce59 [ 991.729939][T19157] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f418f81618c [ 991.729953][T19157] RBP: 00007f418f816180 R08: 0000000000000001 R09: 0000000000000000 [ 991.729968][T19157] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 991.729982][T19157] R13: 00007f418f816218 R14: 00007ffe13053c20 R15: 00007ffe13053d08 [ 991.730012][T19157] [ 992.069774][T19139] kexec: Could not allocate control_code_buffer [ 993.625352][T19191] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 993.709650][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.715986][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.318686][T19201] zswap: compressor not available [ 994.610406][T19222] openvswitch: netlink: Duplicate or invalid key (type 0). [ 994.648601][T19222] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1000.794535][T19296] kexec: Could not allocate control_code_buffer [ 1000.942901][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1000.955863][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1000.971008][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1000.981574][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1000.989082][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1001.228343][T19303] FAULT_INJECTION: forcing a failure. [ 1001.228343][T19303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.300223][T19303] CPU: 0 UID: 0 PID: 19303 Comm: syz.2.2499 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1001.300267][T19303] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1001.300276][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1001.300291][T19303] Call Trace: [ 1001.300298][T19303] [ 1001.300307][T19303] dump_stack_lvl+0x100/0x190 [ 1001.300341][T19303] should_fail_ex.cold+0x5/0xa [ 1001.300373][T19303] core_sys_select+0x9b9/0xbb0 [ 1001.300420][T19303] ? __pfx_core_sys_select+0x10/0x10 [ 1001.300494][T19303] ? ktime_get_ts64+0x306/0x420 [ 1001.300518][T19303] ? ktime_get_ts64+0x318/0x420 [ 1001.300539][T19303] ? ktime_get_ts64+0x257/0x420 [ 1001.300565][T19303] kern_select+0x1d0/0x280 [ 1001.300607][T19303] ? __pfx_kern_select+0x10/0x10 [ 1001.300656][T19303] __x64_sys_select+0xbd/0x160 [ 1001.300694][T19303] ? do_syscall_64+0x90/0x840 [ 1001.300727][T19303] ? lockdep_hardirqs_on+0x78/0x100 [ 1001.300760][T19303] do_syscall_64+0x115/0x840 [ 1001.300792][T19303] ? clear_bhb_loop+0x40/0x90 [ 1001.300821][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.300846][T19303] RIP: 0033:0x7f418f59ce59 [ 1001.300865][T19303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.300890][T19303] RSP: 002b:00007f4190398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1001.300913][T19303] RAX: ffffffffffffffda RBX: 00007f418f815fa0 RCX: 00007f418f59ce59 [ 1001.300930][T19303] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000002 [ 1001.300945][T19303] RBP: 00007f418f632e6f R08: 0000200000000200 R09: 0000000000000000 [ 1001.300960][T19303] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 1001.300975][T19303] R13: 00007f418f816038 R14: 00007f418f815fa0 R15: 00007ffe13053d08 [ 1001.301005][T19303] [ 1002.885292][T17138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1002.898833][T17138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1002.908744][T17138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1002.922093][T17138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1002.931580][T17138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1003.061520][T17138] Bluetooth: hci1: command tx timeout [ 1003.832618][T19307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.859969][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.893223][T19307] bridge_slave_0: entered allmulticast mode [ 1003.922302][T19307] bridge_slave_0: entered promiscuous mode [ 1004.027367][T19307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.055659][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.090745][T19307] bridge_slave_1: entered allmulticast mode [ 1004.127372][T19307] bridge_slave_1: entered promiscuous mode [ 1004.260445][T19307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.338962][T19307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.482916][T19307] team0: Port device team_slave_0 added [ 1004.521514][T19307] team0: Port device team_slave_1 added [ 1004.676214][T19307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.698368][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.793672][T19307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.835616][T19307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.857144][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.943444][T19307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.062454][T17138] Bluetooth: hci5: command tx timeout [ 1005.082811][T19353] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 1005.142763][T17138] Bluetooth: hci1: command tx timeout [ 1005.197594][T19307] hsr_slave_0: entered promiscuous mode [ 1005.220308][T19307] hsr_slave_1: entered promiscuous mode [ 1005.250628][T19307] debugfs: 'hsr0' already exists in 'hsr' [ 1005.270606][T19307] Cannot create hsr debugfs directory [ 1006.917067][T19331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.941755][T19331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.968588][T19331] bridge_slave_0: entered allmulticast mode [ 1007.011745][T19331] bridge_slave_0: entered promiscuous mode [ 1007.033766][T19331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.049292][T19331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.072926][T19331] bridge_slave_1: entered allmulticast mode [ 1007.091395][T19331] bridge_slave_1: entered promiscuous mode [ 1007.143307][T17138] Bluetooth: hci5: command tx timeout [ 1007.223491][T17138] Bluetooth: hci1: command tx timeout [ 1007.296405][T19331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.331119][T19331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.672377][T19331] team0: Port device team_slave_0 added [ 1007.707160][T19331] team0: Port device team_slave_1 added [ 1007.748125][T19307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1007.787759][T19307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.887309][T19307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1007.908954][T19307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.931679][T19307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1007.949846][T19307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.001793][T19307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1008.041778][T19307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.061668][T19331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.080753][T19331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.154660][T19331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.199173][T19331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.227182][T19331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.312570][T19331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.466271][T19331] hsr_slave_0: entered promiscuous mode [ 1008.485452][T19331] hsr_slave_1: entered promiscuous mode [ 1008.500182][T19331] debugfs: 'hsr0' already exists in 'hsr' [ 1008.513943][T19331] Cannot create hsr debugfs directory [ 1009.088653][T19307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.157770][T19307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.186514][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.193685][T10952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.225474][T17138] Bluetooth: hci5: command tx timeout [ 1009.305108][T17138] Bluetooth: hci1: command tx timeout [ 1009.337825][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.345026][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.537842][T19331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1009.560493][T19331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.586458][T19331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1009.621430][T19331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1009.646820][T19331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1009.674035][T19331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1009.691785][T19331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1009.721327][T19331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1010.002205][T19331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.081683][T19331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.349719][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.356883][T10950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.442797][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.449995][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.305482][T17138] Bluetooth: hci5: command tx timeout [ 1011.417037][T19307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.404959][T19331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.561345][T19307] veth0_vlan: entered promiscuous mode [ 1012.628349][T19307] veth1_vlan: entered promiscuous mode [ 1012.766928][T19307] veth0_macvtap: entered promiscuous mode [ 1012.812075][T19307] veth1_macvtap: entered promiscuous mode [ 1012.921704][T19307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.980842][T19307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.187999][ T743] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.245197][ T743] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.354506][ T743] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.378654][T19454] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2514'. [ 1013.392335][ T743] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.430953][T10968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.476273][T10968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.558475][T19331] veth0_vlan: entered promiscuous mode [ 1015.080364][T19331] veth1_vlan: entered promiscuous mode [ 1015.085960][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.146400][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.181104][T19465] ubi0: attaching mtd0 [ 1015.231627][T19465] ubi0: scanning is finished [ 1015.260663][T19465] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1015.430747][T19331] veth0_macvtap: entered promiscuous mode [ 1015.684998][T19331] veth1_macvtap: entered promiscuous mode [ 1015.749980][T19465] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1015.797726][T19331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.899953][T19331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.954270][T19475] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1015.985224][T10961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.079203][T10961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.129957][T10961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.475496][T10961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.769441][T10968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.826985][T10968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.016634][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.092103][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.001741][T19513] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2524'. [ 1019.412710][T19506] bond0: invalid ARP target specified [ 1025.180011][ T30] audit: type=1800 audit(2147483823.921:37): pid=19648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2544" name="version" dev="configfs" ino=91109 res=0 errno=0 [ 1025.423818][T19651] random: crng reseeded on system resumption [ 1025.474822][T19651] FAULT_INJECTION: forcing a failure. [ 1025.474822][T19651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1025.543684][T19651] CPU: 0 UID: 0 PID: 19651 Comm: syz.5.2544 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1025.543724][T19651] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1025.543734][T19651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1025.543748][T19651] Call Trace: [ 1025.543756][T19651] [ 1025.543765][T19651] dump_stack_lvl+0x100/0x190 [ 1025.543799][T19651] should_fail_ex.cold+0x5/0xa [ 1025.543826][T19651] ? prepare_alloc_pages+0x16d/0x5f0 [ 1025.543864][T19651] should_fail_alloc_page+0xeb/0x140 [ 1025.543900][T19651] prepare_alloc_pages+0x1f0/0x5f0 [ 1025.543939][T19651] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1025.543970][T19651] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 1025.544002][T19651] ? stack_trace_save+0x8e/0xc0 [ 1025.544035][T19651] ? __pfx_stack_trace_save+0x10/0x10 [ 1025.544067][T19651] ? arch_stack_walk+0xa6/0xf0 [ 1025.544100][T19651] ? stack_depot_save_flags+0x27/0x9d0 [ 1025.544134][T19651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1025.544164][T19651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1025.544191][T19651] ? __kasan_kmalloc+0xaa/0xb0 [ 1025.544220][T19651] ? memory_bm_create+0x14d/0xba0 [ 1025.544249][T19651] ? snapshot_open+0x23b/0x2b0 [ 1025.544283][T19651] ? misc_open+0x26d/0x450 [ 1025.544318][T19651] ? chrdev_open+0x234/0x6a0 [ 1025.544342][T19651] ? do_dentry_open+0x6ab/0x14d0 [ 1025.544365][T19651] ? vfs_open+0x82/0x3f0 [ 1025.544392][T19651] ? path_openat+0x2873/0x4280 [ 1025.544415][T19651] ? do_file_open+0x20e/0x430 [ 1025.544438][T19651] ? do_sys_openat2+0x10f/0x1e0 [ 1025.544467][T19651] ? __x64_sys_openat+0x12d/0x210 [ 1025.544504][T19651] ? do_syscall_64+0x115/0x840 [ 1025.544536][T19651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.544574][T19651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1025.544612][T19651] ? policy_nodemask+0xed/0x4f0 [ 1025.544649][T19651] alloc_pages_mpol+0x1fb/0x540 [ 1025.544685][T19651] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1025.544720][T19651] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1025.544760][T19651] alloc_pages_noprof+0x1a/0x160 [ 1025.544799][T19651] get_zeroed_page_noprof+0x18/0xb0 [ 1025.544833][T19651] get_image_page+0x18/0x1a0 [ 1025.544862][T19651] alloc_rtree_node+0x3c/0xb0 [ 1025.544892][T19651] memory_bm_create+0x65e/0xba0 [ 1025.544935][T19651] create_basic_memory_bitmaps+0x10b/0x350 [ 1025.544972][T19651] snapshot_open+0x23b/0x2b0 [ 1025.545007][T19651] ? __pfx_snapshot_open+0x10/0x10 [ 1025.545042][T19651] misc_open+0x26d/0x450 [ 1025.545076][T19651] ? __pfx_misc_open+0x10/0x10 [ 1025.545111][T19651] chrdev_open+0x234/0x6a0 [ 1025.545134][T19651] ? __pfx_apparmor_file_open+0x10/0x10 [ 1025.545193][T19651] ? __pfx_chrdev_open+0x10/0x10 [ 1025.545220][T19651] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1025.545253][T19651] do_dentry_open+0x6ab/0x14d0 [ 1025.545277][T19651] ? __pfx_chrdev_open+0x10/0x10 [ 1025.545308][T19651] vfs_open+0x82/0x3f0 [ 1025.545341][T19651] path_openat+0x2873/0x4280 [ 1025.545378][T19651] ? __pfx_path_openat+0x10/0x10 [ 1025.545411][T19651] do_file_open+0x20e/0x430 [ 1025.545437][T19651] ? __pfx_do_file_open+0x10/0x10 [ 1025.545487][T19651] ? alloc_fd+0x471/0x7a0 [ 1025.545513][T19651] ? do_getname+0x191/0x390 [ 1025.545546][T19651] do_sys_openat2+0x10f/0x1e0 [ 1025.545577][T19651] ? __pfx_do_sys_openat2+0x10/0x10 [ 1025.545611][T19651] ? __fget_files+0x21f/0x3d0 [ 1025.545639][T19651] __x64_sys_openat+0x12d/0x210 [ 1025.545672][T19651] ? __pfx___x64_sys_openat+0x10/0x10 [ 1025.545716][T19651] do_syscall_64+0x115/0x840 [ 1025.545747][T19651] ? clear_bhb_loop+0x40/0x90 [ 1025.545776][T19651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.545801][T19651] RIP: 0033:0x7f592039ce59 [ 1025.545820][T19651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.545845][T19651] RSP: 002b:00007f592124f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1025.545867][T19651] RAX: ffffffffffffffda RBX: 00007f5920616090 RCX: 00007f592039ce59 [ 1025.545884][T19651] RDX: 0000000000002401 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1025.545899][T19651] RBP: 00007f5920432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1025.545914][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.545929][T19651] R13: 00007f5920616128 R14: 00007f5920616090 R15: 00007ffe88b870f8 [ 1025.545959][T19651] [ 1025.988366][T19658] random: crng reseeded on system resumption [ 1026.928429][T10968] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 9 with max blocks 3 with error 117 [ 1026.975116][T10968] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1026.975116][T10968] [ 1027.346698][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2555'. [ 1027.417844][T19700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.492425][T19700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.555947][T19700] bond0 (unregistering): Released all slaves [ 1029.430171][T10952] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.692208][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1029.714350][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1029.727790][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1029.739718][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1029.752825][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1029.855949][T19744] netlink: 'syz.2.2564': attribute type 153 has an invalid length. [ 1029.952941][T10952] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.336060][T10952] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.501984][T10952] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.914008][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 1031.033547][T19769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'. [ 1031.120438][T19764] openvswitch: HfR: Dropping previously announced user features [ 1031.286142][T19769] HfR: left promiscuous mode [ 1031.684039][T19779] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2569'. [ 1031.797155][ T50] Bluetooth: hci5: command tx timeout [ 1031.839338][T19790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2572'. [ 1031.909716][T19784] nbd: socks must be embedded in a SOCK_ITEM attr [ 1031.958874][T19784] block nbd0: shutting down sockets [ 1032.044190][T10952] bridge_slave_1: left allmulticast mode [ 1032.065337][T10952] bridge_slave_1: left promiscuous mode [ 1032.089851][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.132830][T10952] bridge_slave_0: left allmulticast mode [ 1032.157999][T10952] bridge_slave_0: left promiscuous mode [ 1032.182830][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.781762][T10952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.811143][T10952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.832421][T10952] bond0 (unregistering): Released all slaves [ 1032.895849][T19790] team0 (unregistering): Port device team_slave_0 removed [ 1032.909713][T19790] team0 (unregistering): Port device team_slave_1 removed [ 1032.972142][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1033.165383][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 1033.563191][T10952] hsr_slave_0: left promiscuous mode [ 1033.570779][T10952] hsr_slave_1: left promiscuous mode [ 1033.577869][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.585508][T10952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.594658][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.602629][T10952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.619992][T10952] veth1_macvtap: left promiscuous mode [ 1033.625737][T10952] veth0_macvtap: left promiscuous mode [ 1033.637245][T10952] veth1_vlan: left promiscuous mode [ 1033.642798][T10952] veth0_vlan: left promiscuous mode [ 1033.876761][ T50] Bluetooth: hci5: command tx timeout [ 1033.924191][T10952] team0 (unregistering): Port device team_slave_1 removed [ 1033.943789][T10952] team0 (unregistering): Port device team_slave_0 removed [ 1034.965167][T19814] FAULT_INJECTION: forcing a failure. [ 1034.965167][T19814] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.045718][T19814] CPU: 0 UID: 0 PID: 19814 Comm: syz.2.2574 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1035.045760][T19814] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1035.045770][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1035.045785][T19814] Call Trace: [ 1035.045793][T19814] [ 1035.045803][T19814] dump_stack_lvl+0x100/0x190 [ 1035.045838][T19814] should_fail_ex.cold+0x5/0xa [ 1035.045870][T19814] should_failslab+0xc2/0x120 [ 1035.045905][T19814] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1035.045942][T19814] ? kstrdup_const+0x63/0x80 [ 1035.045977][T19814] kstrdup+0x51/0xe0 [ 1035.046006][T19814] kstrdup_const+0x63/0x80 [ 1035.046034][T19814] __kernfs_new_node+0x9b/0xa10 [ 1035.046079][T19814] ? __pfx___kernfs_new_node+0x10/0x10 [ 1035.046127][T19814] ? find_held_lock+0x2b/0x80 [ 1035.046159][T19814] ? kernfs_root+0xee/0x2a0 [ 1035.046194][T19814] ? kernfs_root+0xee/0x2a0 [ 1035.046237][T19814] kernfs_new_node+0x117/0x150 [ 1035.046266][T19814] __kernfs_create_file+0x53/0x350 [ 1035.046300][T19814] cgroup_addrm_files+0x4ef/0xdb0 [ 1035.046355][T19814] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1035.046394][T19814] ? find_held_lock+0x2b/0x80 [ 1035.046436][T19814] ? _raw_spin_unlock+0x28/0x50 [ 1035.046465][T19814] ? xa_store+0x3f/0x50 [ 1035.046503][T19814] ? mem_cgroup_css_online+0x39b/0xbf0 [ 1035.046536][T19814] css_populate_dir+0x161/0x590 [ 1035.046564][T19814] cgroup_apply_control_enable+0x441/0xdd0 [ 1035.046610][T19814] cgroup_mkdir+0x57f/0x1330 [ 1035.046650][T19814] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1035.046688][T19814] kernfs_iop_mkdir+0x111/0x190 [ 1035.046717][T19814] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1035.046757][T19814] vfs_mkdir+0x361/0x850 [ 1035.046796][T19814] filename_mkdirat+0x48b/0x5e0 [ 1035.046827][T19814] ? __pfx_filename_mkdirat+0x10/0x10 [ 1035.046854][T19814] ? strncpy_from_user+0x19d/0x2d0 [ 1035.046885][T19814] ? do_getname+0x191/0x390 [ 1035.046920][T19814] __x64_sys_mkdir+0x6b/0x90 [ 1035.046948][T19814] do_syscall_64+0x115/0x840 [ 1035.046981][T19814] ? clear_bhb_loop+0x40/0x90 [ 1035.047011][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.047037][T19814] RIP: 0033:0x7f418f59ce59 [ 1035.047058][T19814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.047083][T19814] RSP: 002b:00007f4190398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1035.047106][T19814] RAX: ffffffffffffffda RBX: 00007f418f815fa0 RCX: 00007f418f59ce59 [ 1035.047124][T19814] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1035.047139][T19814] RBP: 00007f418f632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1035.047155][T19814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.047170][T19814] R13: 00007f418f816038 R14: 00007f418f815fa0 R15: 00007ffe13053d08 [ 1035.047201][T19814] [ 1036.041902][ T50] Bluetooth: hci5: command tx timeout [ 1036.550780][T19814] cgroup: cgroup_addrm_files: failed to add force_empty, err=-12 [ 1036.882179][T19740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.913476][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.946834][T19740] bridge_slave_0: entered allmulticast mode [ 1036.981895][T19740] bridge_slave_0: entered promiscuous mode [ 1037.065935][T19740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.106008][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.141093][T19740] bridge_slave_1: entered allmulticast mode [ 1037.179969][T19740] bridge_slave_1: entered promiscuous mode [ 1037.246116][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1037.508278][T19740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.553702][T19740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.843446][T19740] team0: Port device team_slave_0 added [ 1037.975103][T19740] team0: Port device team_slave_1 added [ 1038.092640][T19740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.120605][T17138] Bluetooth: hci5: command tx timeout [ 1038.134368][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.226091][T19740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.281888][T19740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.293226][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.411307][T19740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.707785][T19740] hsr_slave_0: entered promiscuous mode [ 1038.761708][T19740] hsr_slave_1: entered promiscuous mode [ 1038.812418][T19740] debugfs: 'hsr0' already exists in 'hsr' [ 1038.861093][T19740] Cannot create hsr debugfs directory [ 1039.557923][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1039.975165][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2584'. [ 1042.377649][T19740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1042.464279][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1042.520634][T19740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1042.659567][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1042.718019][T19740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1042.807697][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.863246][T19740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1042.908677][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1043.577160][T19740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.706178][T19740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.768428][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.775644][T10952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.886618][T10952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.893827][T10952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.378754][T19992] bond0: invalid ARP target specified [ 1046.488212][T19992] nbd: socks must be embedded in a SOCK_ITEM attr [ 1046.549945][T19992] block nbd0: shutting down sockets [ 1046.612172][T19740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.633725][T19996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2594'. [ 1046.762693][T19996] team0 (unregistering): Port device team_slave_0 removed [ 1046.833545][T19996] team0 (unregistering): Port device team_slave_1 removed [ 1047.013890][T17138] Bluetooth: hci4: command 0x0406 tx timeout [ 1047.768991][T19740] veth0_vlan: entered promiscuous mode [ 1047.802079][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1047.829938][T19740] veth1_vlan: entered promiscuous mode [ 1048.042358][T20014] bond0: Unable to set down delay as MII monitoring is disabled [ 1048.463270][T19740] veth0_macvtap: entered promiscuous mode [ 1048.544995][T19740] veth1_macvtap: entered promiscuous mode [ 1048.772250][T19740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.983455][T19740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.063035][T10968] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.112353][T10968] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.170104][T10968] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.214061][T10968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.605447][ T9133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.659353][ T9133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.778519][T10950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.825186][T10950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.542260][T20058] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1053.695669][T20097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2603'. [ 1053.915809][T20090] input: jJǸ-9%vJ86 as /devices/virtual/input/input15 [ 1054.058316][T20097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.090415][T20097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.118262][T20097] bond0 (unregistering): Released all slaves [ 1054.134585][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.011617][T17138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1055.030646][T20115] FAULT_INJECTION: forcing a failure. [ 1055.030646][T20115] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1055.047784][T17138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1055.063083][T17138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1055.092664][T17138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1055.100445][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1055.171398][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.179262][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.201524][T20115] CPU: 0 UID: 0 PID: 20115 Comm: syz.5.2609 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1055.201567][T20115] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1055.201577][T20115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1055.201593][T20115] Call Trace: [ 1055.201602][T20115] [ 1055.201612][T20115] dump_stack_lvl+0x100/0x190 [ 1055.201647][T20115] should_fail_ex.cold+0x5/0xa [ 1055.201679][T20115] get_futex_key+0x1d2/0x14f0 [ 1055.201708][T20115] ? __pfx_get_futex_key+0x10/0x10 [ 1055.201733][T20115] ? __destroy_inode+0x2cd/0x710 [ 1055.201763][T20115] ? __pfx_sock_free_inode+0x10/0x10 [ 1055.201793][T20115] ? destroy_inode+0x139/0x1c0 [ 1055.201827][T20115] futex_wake+0xf4/0x5e0 [ 1055.201862][T20115] ? __pfx_futex_wake+0x10/0x10 [ 1055.201896][T20115] ? iput.part.0+0x981/0x1050 [ 1055.201936][T20115] do_futex+0x2b2/0x440 [ 1055.201965][T20115] ? __pfx_do_futex+0x10/0x10 [ 1055.201990][T20115] ? iput+0x3a/0x40 [ 1055.202017][T20115] ? __sock_release+0x184/0x260 [ 1055.202048][T20115] __x64_sys_futex+0x34f/0x4d0 [ 1055.202086][T20115] ? __sys_socket+0xac/0x260 [ 1055.202120][T20115] ? __pfx___x64_sys_futex+0x10/0x10 [ 1055.202160][T20115] do_syscall_64+0x115/0x840 [ 1055.202192][T20115] ? clear_bhb_loop+0x40/0x90 [ 1055.202223][T20115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.202248][T20115] RIP: 0033:0x7f4db199ce59 [ 1055.202269][T20115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.202293][T20115] RSP: 002b:00007f4db27970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1055.202317][T20115] RAX: ffffffffffffffda RBX: 00007f4db1c15fa8 RCX: 00007f4db199ce59 [ 1055.202333][T20115] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4db1c15fac [ 1055.202348][T20115] RBP: 00007f4db1c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1055.202363][T20115] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1055.202379][T20115] R13: 00007f4db1c16038 R14: 00007fffebca5930 R15: 00007fffebca5a18 [ 1055.202409][T20115] [ 1057.168758][ T50] Bluetooth: hci6: command tx timeout [ 1059.176735][T20112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.227113][T20112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.249718][ T50] Bluetooth: hci6: command tx timeout [ 1059.273338][T20112] bridge_slave_0: entered allmulticast mode [ 1059.308293][T20112] bridge_slave_0: entered promiscuous mode [ 1059.338594][T20112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.375848][T20112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.404964][T20112] bridge_slave_1: entered allmulticast mode [ 1059.437582][T20112] bridge_slave_1: entered promiscuous mode [ 1059.591414][T20112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.657474][T20112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.834847][T20112] team0: Port device team_slave_0 added [ 1059.877890][T20112] team0: Port device team_slave_1 added [ 1060.052699][T20112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.078330][T20112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.173245][T20112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.275201][T20112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.320525][T20112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.413742][T20112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.696142][T20112] hsr_slave_0: entered promiscuous mode [ 1060.723586][T20112] hsr_slave_1: entered promiscuous mode [ 1060.763925][T20112] debugfs: 'hsr0' already exists in 'hsr' [ 1060.806080][T20112] Cannot create hsr debugfs directory [ 1061.330780][ T50] Bluetooth: hci6: command tx timeout [ 1061.749205][T20203] snd_aloop snd_aloop.0: snd_timer_open (551,0,0) failed with -19 [ 1063.020356][T20112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1063.104173][T20112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.174372][T20112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1063.304538][T20112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.340060][T20112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1063.393840][T20112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.412378][ T50] Bluetooth: hci6: command tx timeout [ 1063.439104][T20112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1063.487732][T20112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.924925][T20112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.948322][T20231] input: jJǸ-9%vJ86 as /devices/virtual/input/input16 [ 1064.045733][T20112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.128015][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.135224][T10950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.279452][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.286635][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.795999][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2636'. [ 1067.190326][T20112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.503871][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.562937][T20300] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2638'. [ 1068.628816][T20112] veth0_vlan: entered promiscuous mode [ 1068.688048][T20112] veth1_vlan: entered promiscuous mode [ 1068.817863][T20112] veth0_macvtap: entered promiscuous mode [ 1068.839251][ T30] audit: type=1107 audit(2147483653.026:38): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1068.886251][T20112] veth1_macvtap: entered promiscuous mode [ 1068.922658][ T30] audit: type=1107 audit(2147483653.026:39): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1068.986787][T20112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.053556][T20112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.163189][ T743] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.209188][ T743] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.319699][ T743] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.383422][ T743] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.875072][ T9128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.952995][ T9128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.149302][T20295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.203398][T20295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.480500][T20336] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2646'. [ 1070.617859][T20336] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2646'. [ 1070.690597][T20342] random: crng reseeded on system resumption [ 1074.650789][T20391] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 1077.443910][T20420] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1077.466782][T20420] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1077.483936][T20420] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1077.498270][T20420] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1077.541495][T20420] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1077.554676][T20420] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1077.574934][T20420] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1077.602931][T20420] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1077.634851][T20420] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1077.671695][T20420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1077.701425][T20420] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1077.726211][T20420] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1077.751109][T20420] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1077.765010][T20420] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1077.812496][T20420] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1077.835452][T20420] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1077.854362][T20420] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1077.877802][T20420] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1078.796585][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 1079.143851][ T5634] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1079.502464][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 1079.580059][T20451] Bluetooth: hci3: command 0x0c1a tx timeout [ 1079.586133][T17138] Bluetooth: hci0: command 0x0406 tx timeout [ 1079.659657][T20451] Bluetooth: hci1: command 0x0c1a tx timeout [ 1079.820015][T20451] Bluetooth: hci5: command 0x0c1a tx timeout [ 1079.900050][T20451] Bluetooth: hci6: command 0x0c1a tx timeout [ 1080.136696][T20461] hub 1-0:1.0: USB hub found [ 1080.214836][T20461] hub 1-0:1.0: 1 port detected [ 1080.860186][T20451] Bluetooth: hci2: command 0x0406 tx timeout [ 1081.246252][T20470] netlink: 'syz.5.2678': attribute type 12 has an invalid length. [ 1081.580554][T20451] Bluetooth: hci4: command 0x0406 tx timeout [ 1081.662454][T17138] Bluetooth: hci0: command 0x0406 tx timeout [ 1081.668539][T20451] Bluetooth: hci3: command 0x0c1a tx timeout [ 1081.741264][T20451] Bluetooth: hci1: command 0x0c1a tx timeout [ 1081.905132][T20451] Bluetooth: hci5: command 0x0c1a tx timeout [ 1081.981053][ T50] Bluetooth: hci6: command 0x0c1a tx timeout [ 1082.068716][T20478] program syz.6.2673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1082.236006][T20482] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[19740] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[20482] [ 1082.474438][T20485] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1082.501441][T20485] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1082.519703][T20485] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1082.539001][T20485] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1082.559896][T20485] page dumped because: unmovable page [ 1082.572065][T20485] page_owner info is not present (never set?) [ 1083.077240][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2675'. [ 1083.375654][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2676'. [ 1083.455286][T20497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.510750][T20497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.559070][T20497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.586457][T20497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.741936][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 1083.830040][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 1083.852509][T20507] netlink: 'syz.6.2680': attribute type 12 has an invalid length. [ 1083.983420][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 1084.062350][ T50] Bluetooth: hci6: command 0x0c1a tx timeout [ 1084.621225][T20519] FAULT_INJECTION: forcing a failure. [ 1084.621225][T20519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1084.688068][T20519] CPU: 0 UID: 0 PID: 20519 Comm: syz.6.2683 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1084.688109][T20519] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1084.688119][T20519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1084.688134][T20519] Call Trace: [ 1084.688142][T20519] [ 1084.688152][T20519] dump_stack_lvl+0x100/0x190 [ 1084.688186][T20519] should_fail_ex.cold+0x5/0xa [ 1084.688214][T20519] ? fs_reclaim_acquire+0x70/0x100 [ 1084.688253][T20519] should_fail_alloc_page+0xeb/0x140 [ 1084.688290][T20519] prepare_alloc_pages+0x1f0/0x5f0 [ 1084.688333][T20519] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1084.688363][T20519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1084.688393][T20519] ? __pfx_stack_trace_save+0x10/0x10 [ 1084.688430][T20519] ? stack_depot_save_flags+0x27/0x9d0 [ 1084.688467][T20519] ? kasan_save_stack+0x3f/0x50 [ 1084.688501][T20519] ? kasan_save_stack+0x30/0x50 [ 1084.688530][T20519] ? kasan_save_track+0x14/0x30 [ 1084.688560][T20519] ? __kasan_kmalloc+0xaa/0xb0 [ 1084.688597][T20519] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1084.688622][T20519] ? relay_open_buf.part.0+0x91/0xb70 [ 1084.688655][T20519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1084.688686][T20519] ? __lock_acquire+0x49f/0x1a40 [ 1084.688741][T20519] ? find_held_lock+0x2b/0x80 [ 1084.688772][T20519] ? rcu_read_unlock+0x17/0x60 [ 1084.688810][T20519] ? rcu_read_unlock+0x17/0x60 [ 1084.688851][T20519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1084.688890][T20519] ? policy_nodemask+0xed/0x4f0 [ 1084.688929][T20519] alloc_pages_mpol+0x1fb/0x540 [ 1084.688967][T20519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1084.689011][T20519] alloc_pages_noprof+0x1a/0x160 [ 1084.689053][T20519] relay_open_buf.part.0+0x261/0xb70 [ 1084.689094][T20519] relay_open+0x7b9/0xa00 [ 1084.689129][T20519] blk_trace_setup_prepare+0x35c/0x6c0 [ 1084.689164][T20519] blk_trace_setup+0x217/0x440 [ 1084.689200][T20519] ? __pfx_blk_trace_setup+0x10/0x10 [ 1084.689231][T20519] ? lockdep_hardirqs_on+0x16/0x100 [ 1084.689272][T20519] ? __pfx_vsnprintf+0x10/0x10 [ 1084.689322][T20519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1084.689360][T20519] ? do_vfs_ioctl+0x226/0x13e0 [ 1084.689400][T20519] blk_trace_ioctl+0x245/0x320 [ 1084.689434][T20519] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1084.689480][T20519] ? find_held_lock+0x2b/0x80 [ 1084.689512][T20519] ? __fget_files+0x215/0x3d0 [ 1084.689533][T20519] ? hook_file_ioctl_common+0x140/0x440 [ 1084.689562][T20519] blkdev_ioctl+0x17c/0x6f0 [ 1084.689601][T20519] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1084.689640][T20519] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1084.689675][T20519] __x64_sys_ioctl+0x18e/0x210 [ 1084.689714][T20519] do_syscall_64+0x115/0x840 [ 1084.689747][T20519] ? clear_bhb_loop+0x40/0x90 [ 1084.689778][T20519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.689804][T20519] RIP: 0033:0x7f269919ce59 [ 1084.689824][T20519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.689849][T20519] RSP: 002b:00007f2699fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1084.689874][T20519] RAX: ffffffffffffffda RBX: 00007f2699416090 RCX: 00007f269919ce59 [ 1084.689890][T20519] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 1084.689907][T20519] RBP: 00007f2699232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1084.689923][T20519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.689938][T20519] R13: 00007f2699416128 R14: 00007f2699416090 R15: 00007ffebce71cc8 [ 1084.689969][T20519] [ 1085.673179][T20523] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 1085.699362][T20523] FAULT_INJECTION: forcing a failure. [ 1085.699362][T20523] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.732789][T20523] CPU: 0 UID: 0 PID: 20523 Comm: syz.5.2684 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1085.732831][T20523] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1085.732841][T20523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1085.732857][T20523] Call Trace: [ 1085.732866][T20523] [ 1085.732875][T20523] dump_stack_lvl+0x100/0x190 [ 1085.732910][T20523] should_fail_ex.cold+0x5/0xa [ 1085.732942][T20523] should_failslab+0xc2/0x120 [ 1085.732981][T20523] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1085.733013][T20523] ? __asan_memcpy+0x3c/0x60 [ 1085.733038][T20523] ? __kernfs_new_node+0xd2/0xa10 [ 1085.733084][T20523] __kernfs_new_node+0xd2/0xa10 [ 1085.733129][T20523] ? __pfx___kernfs_new_node+0x10/0x10 [ 1085.733176][T20523] ? find_held_lock+0x2b/0x80 [ 1085.733208][T20523] ? kernfs_root+0xee/0x2a0 [ 1085.733243][T20523] ? kernfs_root+0xee/0x2a0 [ 1085.733285][T20523] kernfs_new_node+0x117/0x150 [ 1085.733314][T20523] kernfs_create_link+0xcc/0x240 [ 1085.733348][T20523] sysfs_do_create_link_sd+0x90/0x140 [ 1085.733387][T20523] sysfs_create_link+0x61/0xc0 [ 1085.733424][T20523] device_add+0x675/0x1970 [ 1085.733459][T20523] ? __pfx_device_add+0x10/0x10 [ 1085.733496][T20523] ? kobject_get+0xbb/0x150 [ 1085.733549][T20523] cdev_device_add+0x12b/0x270 [ 1085.733577][T20523] evdev_connect+0x3a8/0x4b0 [ 1085.733609][T20523] input_attach_handler.isra.0+0x177/0x1e0 [ 1085.733642][T20523] input_register_device.cold+0x139/0x375 [ 1085.733683][T20523] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 1085.733721][T20523] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1085.733756][T20523] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1085.733800][T20523] ? find_held_lock+0x2b/0x80 [ 1085.733830][T20523] ? __fget_files+0x215/0x3d0 [ 1085.733865][T20523] ? __pfx_uinput_ioctl+0x10/0x10 [ 1085.733900][T20523] __x64_sys_ioctl+0x18e/0x210 [ 1085.733937][T20523] do_syscall_64+0x115/0x840 [ 1085.733972][T20523] ? clear_bhb_loop+0x40/0x90 [ 1085.734003][T20523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.734028][T20523] RIP: 0033:0x7f4db199ce59 [ 1085.734049][T20523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.734073][T20523] RSP: 002b:00007f4db2776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1085.734097][T20523] RAX: ffffffffffffffda RBX: 00007f4db1c16090 RCX: 00007f4db199ce59 [ 1085.734114][T20523] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 1085.734129][T20523] RBP: 00007f4db1a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1085.734145][T20523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.734160][T20523] R13: 00007f4db1c16128 R14: 00007f4db1c16090 R15: 00007fffebca5a18 [ 1085.734192][T20523] [ 1086.063793][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 1086.155045][T20523] input: failed to attach handler evdev to device input18, error: -12 [ 1086.662017][T20451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1086.686520][T20451] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1086.695058][T20451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1086.715852][T20451] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1086.727081][T20451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1088.141382][T20557] FAULT_INJECTION: forcing a failure. [ 1088.141382][T20557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.159247][T20451] Bluetooth: hci5: command 0x0c1a tx timeout [ 1088.199266][T20557] CPU: 0 UID: 0 PID: 20557 Comm: syz.6.2691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1088.199308][T20557] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1088.199317][T20557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1088.199332][T20557] Call Trace: [ 1088.199347][T20557] [ 1088.199357][T20557] dump_stack_lvl+0x100/0x190 [ 1088.199391][T20557] should_fail_ex.cold+0x5/0xa [ 1088.199422][T20557] _copy_from_user+0x2e/0xd0 [ 1088.199453][T20557] copy_msghdr_from_user+0x9f/0x4c0 [ 1088.199486][T20557] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1088.199532][T20557] ___sys_sendmsg+0x106/0x1e0 [ 1088.199565][T20557] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.199595][T20557] ? __lock_acquire+0x49f/0x1a40 [ 1088.199634][T20557] ? get_pid_task+0x106/0x250 [ 1088.199695][T20557] __sys_sendmsg+0x160/0x210 [ 1088.199719][T20557] ? __pfx___sys_sendmsg+0x10/0x10 [ 1088.199757][T20557] do_syscall_64+0x115/0x840 [ 1088.199789][T20557] ? clear_bhb_loop+0x40/0x90 [ 1088.199818][T20557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.199843][T20557] RIP: 0033:0x7f269919ce59 [ 1088.199862][T20557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.199887][T20557] RSP: 002b:00007f2699ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.199910][T20557] RAX: ffffffffffffffda RBX: 00007f2699415fa0 RCX: 00007f269919ce59 [ 1088.199926][T20557] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1088.199940][T20557] RBP: 00007f2699ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.199955][T20557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.199969][T20557] R13: 00007f2699416038 R14: 00007f2699415fa0 R15: 00007ffebce71cc8 [ 1088.199998][T20557] [ 1088.784664][T20451] Bluetooth: hci7: command tx timeout [ 1089.538183][T20532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.564796][T20532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.581418][T20532] bridge_slave_0: entered allmulticast mode [ 1089.597585][T20532] bridge_slave_0: entered promiscuous mode [ 1089.887695][T20532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.950999][T20532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.003169][T20532] bridge_slave_1: entered allmulticast mode [ 1090.045617][T20532] bridge_slave_1: entered promiscuous mode [ 1090.161302][T20583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2693'. [ 1090.292584][T20532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.376309][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1090.394692][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1090.404083][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1090.414511][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1090.423778][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1090.439043][T20532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.744395][T20532] team0: Port device team_slave_0 added [ 1090.809083][T20532] team0: Port device team_slave_1 added [ 1090.866284][ T50] Bluetooth: hci7: command tx timeout [ 1091.074613][T20532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.106825][T20532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.160517][T20532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.214277][T20532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.239891][T20532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.355892][T20532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.631784][T20532] hsr_slave_0: entered promiscuous mode [ 1091.674066][T20532] hsr_slave_1: entered promiscuous mode [ 1091.712351][T20532] debugfs: 'hsr0' already exists in 'hsr' [ 1091.735204][T20613] netlink: ct_mark mask cannot be 0 [ 1091.749860][T20532] Cannot create hsr debugfs directory [ 1091.798145][ T50] Bluetooth: hci6: unexpected subevent 0x01 length: 3 < 18 [ 1092.017267][T20622] random: crng reseeded on system resumption [ 1092.546663][ T50] Bluetooth: hci8: command tx timeout [ 1092.949411][ T50] Bluetooth: hci7: command tx timeout [ 1093.645243][T20532] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1093.686064][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2703'. [ 1093.725162][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1093.755854][T20532] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1093.792809][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.822084][T20532] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1093.862876][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.945355][T20532] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1093.985845][T20532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.115003][T20596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.124462][T20596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.132154][T20596] bridge_slave_0: entered allmulticast mode [ 1094.141409][T20596] bridge_slave_0: entered promiscuous mode [ 1094.208423][T20596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.215755][T20596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.226641][T20596] bridge_slave_1: entered allmulticast mode [ 1094.243478][T20596] bridge_slave_1: entered promiscuous mode [ 1094.344155][T20596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.389708][T20596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.574536][T20596] team0: Port device team_slave_0 added [ 1094.606374][T20596] team0: Port device team_slave_1 added [ 1094.629177][ T50] Bluetooth: hci8: command tx timeout [ 1094.701544][T20666] netlink: ct_mark mask cannot be 0 [ 1094.736274][T20661] snd_aloop snd_aloop.0: snd_timer_open (551,0,0) failed with -19 [ 1095.042028][ T50] Bluetooth: hci7: command tx timeout [ 1095.053369][T20596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.064275][T20596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.175083][T20596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.274932][T20596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.301923][T20596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.396390][T20596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.835421][T20596] hsr_slave_0: entered promiscuous mode [ 1095.852731][T20596] hsr_slave_1: entered promiscuous mode [ 1095.866364][T20596] debugfs: 'hsr0' already exists in 'hsr' [ 1095.879487][T20596] Cannot create hsr debugfs directory [ 1096.049942][T20532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.223355][T20532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.252318][T20293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.259529][T20293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.305151][T20293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.312360][T20293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.708489][ T50] Bluetooth: hci8: command tx timeout [ 1096.818887][T20596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1096.867384][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1096.929668][T20596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1096.980248][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1097.015273][T20596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1097.082899][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1097.127760][T20596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1097.170567][T20596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1097.456255][T20596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.519541][T20596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.568239][T20295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.575435][T20295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.636527][T20295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.643711][T20295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.876741][T20532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.722346][T20532] veth0_vlan: entered promiscuous mode [ 1098.774785][T20532] veth1_vlan: entered promiscuous mode [ 1098.790477][ T50] Bluetooth: hci8: command tx timeout [ 1098.885009][T20532] veth0_macvtap: entered promiscuous mode [ 1098.918450][T20532] veth1_macvtap: entered promiscuous mode [ 1098.993904][T20532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.046292][T20532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.101747][ T9128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.140877][ T9128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.178074][ T9128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.205861][ T9128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.231271][T20596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.496683][T20290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.540817][T20290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.649176][T20290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.682198][T20290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.595989][T20596] veth0_vlan: entered promiscuous mode [ 1100.883727][T20596] veth1_vlan: entered promiscuous mode [ 1100.915980][T20736] netlink: ct_mark mask cannot be 0 [ 1101.157410][T20596] veth0_macvtap: entered promiscuous mode [ 1101.224825][T20596] veth1_macvtap: entered promiscuous mode [ 1101.375114][T20596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.446410][T20596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.552560][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.624725][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.680596][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.773885][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.139956][T20752] program syz.5.2711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1102.193566][T20754] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2716'. [ 1102.672765][T20295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.700075][T20754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.742064][T20295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.813127][T20754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.979778][T20772] FAULT_INJECTION: forcing a failure. [ 1102.979778][T20772] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.052510][T20772] CPU: 0 UID: 0 PID: 20772 Comm: syz.6.2719 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1103.052553][T20772] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1103.052564][T20772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1103.052579][T20772] Call Trace: [ 1103.052588][T20772] [ 1103.052597][T20772] dump_stack_lvl+0x100/0x190 [ 1103.052633][T20772] should_fail_ex.cold+0x5/0xa [ 1103.052661][T20772] ? sctp_get_port_local+0xbb3/0x1630 [ 1103.052705][T20772] should_failslab+0xc2/0x120 [ 1103.052740][T20772] __kmalloc_cache_noprof+0x91/0x6c0 [ 1103.052768][T20772] ? sctp_add_bind_addr+0xae/0x3e0 [ 1103.052808][T20772] sctp_add_bind_addr+0xae/0x3e0 [ 1103.052847][T20772] sctp_do_bind+0x36c/0x760 [ 1103.052880][T20772] sctp_connect_new_asoc+0x5e7/0x770 [ 1103.052914][T20772] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1103.052947][T20772] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1103.052991][T20772] __sctp_connect+0x3e7/0xc70 [ 1103.053027][T20772] ? __pfx___sctp_connect+0x10/0x10 [ 1103.053067][T20772] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1103.053107][T20772] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1103.053149][T20772] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1103.053178][T20772] sctp_inet_connect+0x15f/0x220 [ 1103.053215][T20772] __sys_connect_file+0x141/0x1a0 [ 1103.053260][T20772] __sys_connect+0x141/0x170 [ 1103.053296][T20772] ? __pfx___sys_connect+0x10/0x10 [ 1103.053352][T20772] __x64_sys_connect+0x72/0xb0 [ 1103.053390][T20772] ? lockdep_hardirqs_on+0x78/0x100 [ 1103.053423][T20772] do_syscall_64+0x115/0x840 [ 1103.053456][T20772] ? clear_bhb_loop+0x40/0x90 [ 1103.053486][T20772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.053512][T20772] RIP: 0033:0x7f269919ce59 [ 1103.053532][T20772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.053566][T20772] RSP: 002b:00007f2699fd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1103.053590][T20772] RAX: ffffffffffffffda RBX: 00007f2699416090 RCX: 00007f269919ce59 [ 1103.053607][T20772] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1103.053623][T20772] RBP: 00007f2699232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1103.053638][T20772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.053653][T20772] R13: 00007f2699416128 R14: 00007f2699416090 R15: 00007ffebce71cc8 [ 1103.053684][T20772] [ 1103.326025][ T9128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.333964][ T9128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.991168][T20786] snd_aloop snd_aloop.0: snd_timer_open (551,0,0) failed with -19 [ 1104.316874][T20795] netlink: ct_mark mask cannot be 0 [ 1105.283944][T20808] kafs: addr_prefs: Invalid Command [ 1105.695143][T20805] vhci_hcd: not connected 4 [ 1106.211200][T20824] snd_aloop snd_aloop.0: snd_timer_open (551,0,0) failed with -19 [ 1106.939975][T20843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1107.197353][ T50] Bluetooth: hci6: unexpected event 0x34 length: 726 > 6 [ 1108.276560][T20831] FAULT_INJECTION: forcing a failure. [ 1108.276560][T20831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1108.459541][T20831] CPU: 0 UID: 0 PID: 20831 Comm: syz.8.2728 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1108.459584][T20831] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1108.459594][T20831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.459609][T20831] Call Trace: [ 1108.459619][T20831] [ 1108.459630][T20831] dump_stack_lvl+0x100/0x190 [ 1108.459672][T20831] should_fail_ex.cold+0x5/0xa [ 1108.459699][T20831] ? __import_iovec+0x1d2/0x640 [ 1108.459733][T20831] get_futex_key+0x1d2/0x14f0 [ 1108.459762][T20831] ? __pfx_get_futex_key+0x10/0x10 [ 1108.459786][T20831] ? ____sys_sendmsg+0x582/0xbe0 [ 1108.459825][T20831] futex_wait_setup+0x91/0x540 [ 1108.459866][T20831] __futex_wait+0x19f/0x300 [ 1108.459904][T20831] ? __pfx___futex_wait+0x10/0x10 [ 1108.459937][T20831] ? futex_hash+0x311/0x400 [ 1108.459963][T20831] ? __pfx_futex_wake_mark+0x10/0x10 [ 1108.460000][T20831] ? __pfx_futex_hash+0x10/0x10 [ 1108.460021][T20831] ? find_held_lock+0x2b/0x80 [ 1108.460061][T20831] futex_wait+0xe6/0x370 [ 1108.460094][T20831] ? __pfx_futex_wait+0x10/0x10 [ 1108.460136][T20831] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1108.460159][T20831] ? ksys_write+0x190/0x250 [ 1108.460184][T20831] do_futex+0x265/0x440 [ 1108.460212][T20831] ? __pfx_do_futex+0x10/0x10 [ 1108.460247][T20831] __x64_sys_futex+0x34f/0x4d0 [ 1108.460279][T20831] ? __pfx___x64_sys_futex+0x10/0x10 [ 1108.460319][T20831] do_syscall_64+0x115/0x840 [ 1108.460352][T20831] ? clear_bhb_loop+0x40/0x90 [ 1108.460382][T20831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.460408][T20831] RIP: 0033:0x7f609779ce59 [ 1108.460428][T20831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.460452][T20831] RSP: 002b:00007f60986530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1108.460475][T20831] RAX: ffffffffffffffda RBX: 00007f6097a16188 RCX: 00007f609779ce59 [ 1108.460492][T20831] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6097a16188 [ 1108.460508][T20831] RBP: 00007f6097a16180 R08: 0000000000000000 R09: 0000000000000000 [ 1108.460523][T20831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.460538][T20831] R13: 00007f6097a16218 R14: 00007ffe046a62d0 R15: 00007ffe046a63b8 [ 1108.460568][T20831] [ 1109.858184][T20860] netlink: ct_mark mask cannot be 0 [ 1111.369933][T20880] snd_aloop snd_aloop.0: snd_timer_open (551,0,0) failed with -19 [ 1112.217575][ T5734] Process accounting resumed [ 1112.255488][ T5744] Process accounting resumed [ 1112.302211][ T5744] Process accounting resumed [ 1112.337592][ T5744] Process accounting resumed [ 1112.376665][ T5744] Process accounting resumed [ 1112.416098][ T5744] Process accounting resumed [ 1112.440700][T20882] ima: policy update failed [ 1112.451930][ T5744] Process accounting resumed [ 1112.480979][ T5744] Process accounting resumed [ 1112.503217][ T30] audit: type=1802 audit(2147483696.665:40): pid=20882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2737" res=0 errno=0 [ 1112.535131][ T5744] Process accounting resumed [ 1112.576783][ T5744] Process accounting resumed [ 1112.611296][ T5744] Process accounting resumed [ 1112.651332][ T5744] Process accounting resumed [ 1112.693907][ T5744] Process accounting resumed [ 1112.773584][ T5734] Process accounting resumed [ 1113.390753][T20905] netlink: 74 bytes leftover after parsing attributes in process `syz.8.2740'. [ 1113.925577][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2741'. [ 1114.115540][T20910] FAULT_INJECTION: forcing a failure. [ 1114.115540][T20910] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.205672][T20910] CPU: 0 UID: 0 PID: 20910 Comm: syz.8.2741 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1114.205718][T20910] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1114.205728][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.205743][T20910] Call Trace: [ 1114.205752][T20910] [ 1114.205761][T20910] dump_stack_lvl+0x100/0x190 [ 1114.205797][T20910] should_fail_ex.cold+0x5/0xa [ 1114.205829][T20910] should_failslab+0xc2/0x120 [ 1114.205865][T20910] __kmalloc_cache_noprof+0x91/0x6c0 [ 1114.205891][T20910] ? mpi_alloc+0x46/0x230 [ 1114.205922][T20910] mpi_alloc+0x46/0x230 [ 1114.205947][T20910] rsa_check_payload+0x3b/0xc0 [ 1114.205986][T20910] rsa_enc+0x198/0x3b0 [ 1114.206024][T20910] ? __pfx_rsa_enc+0x10/0x10 [ 1114.206062][T20910] ? __virt_addr_valid+0x239/0x430 [ 1114.206090][T20910] ? sg_init_one+0xf5/0x1b0 [ 1114.206115][T20910] rsassa_pkcs1_verify+0x4eb/0xc20 [ 1114.206149][T20910] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 1114.206197][T20910] ? rsa_max_size+0xd/0x70 [ 1114.206237][T20910] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 1114.206266][T20910] public_key_verify_signature+0x5ee/0x910 [ 1114.206301][T20910] ? __pfx_public_key_verify_signature+0x10/0x10 [ 1114.206344][T20910] ? asymmetric_key_generate_id+0x7e/0x180 [ 1114.206376][T20910] x509_check_for_self_signed+0x325/0x510 [ 1114.206412][T20910] x509_cert_parse+0x60c/0x910 [ 1114.206440][T20910] ? ___sys_sendmsg+0x190/0x1e0 [ 1114.206471][T20910] ? __sys_sendmsg+0x160/0x210 [ 1114.206492][T20910] ? do_syscall_64+0x115/0x840 [ 1114.206549][T20910] pkcs7_extract_cert+0xa4/0x380 [ 1114.206588][T20910] asn1_ber_decoder+0x12b3/0x2170 [ 1114.206634][T20910] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 1114.206676][T20910] ? kasan_save_track+0x14/0x30 [ 1114.206709][T20910] ? __kasan_kmalloc+0xaa/0xb0 [ 1114.206741][T20910] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1114.206768][T20910] ? pkcs7_parse_message+0x15f/0x870 [ 1114.206817][T20910] pkcs7_parse_message+0x289/0x870 [ 1114.206854][T20910] verify_pkcs7_signature+0x30/0xa0 [ 1114.206884][T20910] valid_regdb+0x211/0x590 [ 1114.206927][T20910] ? __pfx_valid_regdb+0x10/0x10 [ 1114.206964][T20910] ? __kasan_kmalloc+0xaa/0xb0 [ 1114.206999][T20910] reg_reload_regdb+0x11a/0x460 [ 1114.207027][T20910] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1114.207056][T20910] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1114.207089][T20910] ? nl80211_pre_doit+0x19a/0xae0 [ 1114.207126][T20910] genl_family_rcv_msg_doit+0x214/0x300 [ 1114.207165][T20910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1114.207207][T20910] ? genl_get_cmd+0x3e7/0x760 [ 1114.207248][T20910] ? bpf_lsm_capable+0x9/0x10 [ 1114.207275][T20910] ? security_capable+0x80/0x260 [ 1114.207332][T20910] genl_rcv_msg+0x560/0x800 [ 1114.207372][T20910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1114.207410][T20910] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1114.207445][T20910] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1114.207471][T20910] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1114.207517][T20910] netlink_rcv_skb+0x159/0x420 [ 1114.207552][T20910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1114.207590][T20910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1114.207653][T20910] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1114.207688][T20910] genl_rcv+0x28/0x40 [ 1114.207723][T20910] netlink_unicast+0x585/0x850 [ 1114.207780][T20910] ? __pfx_netlink_unicast+0x10/0x10 [ 1114.207821][T20910] netlink_sendmsg+0x8b0/0xda0 [ 1114.207860][T20910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.207897][T20910] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1114.207937][T20910] ____sys_sendmsg+0xa4d/0xbe0 [ 1114.207967][T20910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.208002][T20910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1114.208047][T20910] ___sys_sendmsg+0x190/0x1e0 [ 1114.208081][T20910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1114.208113][T20910] ? __lock_acquire+0x49f/0x1a40 [ 1114.208187][T20910] __sys_sendmsg+0x160/0x210 [ 1114.208216][T20910] ? __pfx___sys_sendmsg+0x10/0x10 [ 1114.208256][T20910] do_syscall_64+0x115/0x840 [ 1114.208289][T20910] ? clear_bhb_loop+0x40/0x90 [ 1114.208320][T20910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.208346][T20910] RIP: 0033:0x7f609779ce59 [ 1114.208366][T20910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.208391][T20910] RSP: 002b:00007f6098674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.208414][T20910] RAX: ffffffffffffffda RBX: 00007f6097a16090 RCX: 00007f609779ce59 [ 1114.208432][T20910] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1114.208447][T20910] RBP: 00007f6097832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1114.208462][T20910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.208477][T20910] R13: 00007f6097a16128 R14: 00007f6097a16090 R15: 00007ffe046a63b8 [ 1114.208508][T20910] [ 1115.977979][T20894] Process accounting resumed [ 1116.733063][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.743059][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.184455][T20936] FAULT_INJECTION: forcing a failure. [ 1117.184455][T20936] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.470909][T20936] CPU: 0 UID: 0 PID: 20936 Comm: syz.7.2747 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1117.470957][T20936] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1117.470967][T20936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.470982][T20936] Call Trace: [ 1117.470990][T20936] [ 1117.471000][T20936] dump_stack_lvl+0x100/0x190 [ 1117.471035][T20936] should_fail_ex.cold+0x5/0xa [ 1117.471067][T20936] should_failslab+0xc2/0x120 [ 1117.471103][T20936] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1117.471136][T20936] ? shmem_alloc_inode+0x25/0x50 [ 1117.471173][T20936] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1117.471209][T20936] shmem_alloc_inode+0x25/0x50 [ 1117.471242][T20936] alloc_inode+0x68/0x250 [ 1117.471276][T20936] new_inode+0x22/0x1c0 [ 1117.471311][T20936] shmem_get_inode+0x1e3/0xf70 [ 1117.471350][T20936] ? __pfx_shmem_get_inode+0x10/0x10 [ 1117.471390][T20936] ? make_vfsgid+0xf1/0x140 [ 1117.471428][T20936] shmem_mknod+0x217/0x480 [ 1117.471468][T20936] ? __pfx_shmem_mknod+0x10/0x10 [ 1117.471512][T20936] vfs_mknod+0x3a5/0x7f0 [ 1117.471553][T20936] filename_mknodat+0x5aa/0x7f0 [ 1117.471584][T20936] ? __pfx_filename_mknodat+0x10/0x10 [ 1117.471612][T20936] ? strncpy_from_user+0x19d/0x2d0 [ 1117.471643][T20936] ? do_getname+0x191/0x390 [ 1117.471677][T20936] __x64_sys_mknod+0x8f/0xc0 [ 1117.471705][T20936] do_syscall_64+0x115/0x840 [ 1117.471738][T20936] ? clear_bhb_loop+0x40/0x90 [ 1117.471768][T20936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.471794][T20936] RIP: 0033:0x7f8071b9ce59 [ 1117.471815][T20936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.471838][T20936] RSP: 002b:00007f8072a91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1117.471862][T20936] RAX: ffffffffffffffda RBX: 00007f8071e16090 RCX: 00007f8071b9ce59 [ 1117.471879][T20936] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000000000000000 [ 1117.471894][T20936] RBP: 00007f8071c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1117.471909][T20936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.471932][T20936] R13: 00007f8071e16128 R14: 00007f8071e16090 R15: 00007ffe98f7b688 [ 1117.471964][T20936] [ 1120.911416][T20965] kafs: addr_prefs: Invalid Command [ 1122.085627][T20974] netlink: 'syz.8.2754': attribute type 28 has an invalid length. [ 1122.243957][T20974] netlink: 334 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1122.319967][T20976] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1122.344010][T20451] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1122.366196][T20451] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1122.377295][T20451] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1122.386980][T20451] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1122.394784][T20451] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1123.987898][T21008] sock: sock_timestamping_bind_phc: sock not bind to device [ 1124.035273][T21007] sock: sock_timestamping_bind_phc: sock not bind to device [ 1124.069357][T21009] netlink: 334 bytes leftover after parsing attributes in process `syz.8.2757'. [ 1124.137422][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2757'. [ 1124.189293][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2757'. [ 1124.481935][T20451] Bluetooth: hci9: command tx timeout [ 1126.564485][T20451] Bluetooth: hci9: command tx timeout [ 1126.785956][T20981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.816483][T20981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.848609][T20981] bridge_slave_0: entered allmulticast mode [ 1126.902294][T20981] bridge_slave_0: entered promiscuous mode [ 1127.032157][T20981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.067388][T20981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.091571][T20981] bridge_slave_1: entered allmulticast mode [ 1127.120761][T20981] bridge_slave_1: entered promiscuous mode [ 1127.517921][T20981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.669433][T20981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.013305][T20981] team0: Port device team_slave_0 added [ 1128.141226][T20981] team0: Port device team_slave_1 added [ 1128.262263][T20981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.290886][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.384697][T20981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.433592][T20981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.465889][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.572692][T20981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.644222][T20451] Bluetooth: hci9: command tx timeout [ 1128.865524][T20981] hsr_slave_0: entered promiscuous mode [ 1128.892902][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2763'. [ 1128.907285][T20981] hsr_slave_1: entered promiscuous mode [ 1128.931713][T20981] debugfs: 'hsr0' already exists in 'hsr' [ 1128.947964][T20981] Cannot create hsr debugfs directory [ 1128.966101][T21040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.985232][T21040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.019639][T21041] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2763'. [ 1129.249310][T21040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.273361][T21040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.351886][T21041] macvtap0: entered promiscuous mode [ 1129.363131][T21041] macvtap0: entered allmulticast mode [ 1129.384522][T21041] veth0_macvtap: entered allmulticast mode [ 1130.727448][ T50] Bluetooth: hci9: command tx timeout [ 1131.952596][T21070] sg_write: data in/out 32572/28904 bytes for SCSI command 0x0-- guessing data in; [ 1131.952596][T21070] program syz.8.2767 not setting count and/or reply_len properly [ 1133.464799][T20981] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1133.540492][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1133.555723][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1133.563768][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1133.574608][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1133.592456][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1133.671573][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1133.740527][T20981] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1133.825704][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1133.886207][T20981] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1133.973392][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1134.048094][T20981] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1134.153942][T20981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1134.789704][T20981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.000358][T20981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.086609][T20289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.093810][T20289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.229004][T20289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.236189][T20289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.688513][ T50] Bluetooth: hci10: command tx timeout [ 1136.488790][ T31] INFO: task syz-executor:18306 blocked for more than 143 seconds. [ 1136.520592][ T31] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1136.587802][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1136.682323][ T31] task:syz-executor state:D stack:23752 pid:18306 tgid:18306 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1136.794081][ T31] Call Trace: [ 1136.831017][ T31] [ 1136.864078][ T31] __schedule+0x125c/0x6730 [ 1136.912526][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1136.961001][ T31] ? __pfx___schedule+0x10/0x10 [ 1137.009533][ T31] ? find_held_lock+0x2b/0x80 [ 1137.047482][ T31] ? schedule+0x225/0x2c0 [ 1137.091016][ T31] schedule+0xdd/0x2c0 [ 1137.114943][T21128] zswap: compressor not available [ 1137.120200][ T31] schedule_preempt_disabled+0x13/0x30 [ 1137.177841][ T31] __mutex_lock+0xccc/0x1bd0 [ 1137.220172][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1137.259765][ T31] ? __lock_acquire+0x49f/0x1a40 [ 1137.303430][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1137.348852][ T31] ? net_generic+0xea/0x2a0 [ 1137.381339][ T31] ? net_generic+0xea/0x2a0 [ 1137.423268][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1137.463521][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1137.510550][ T31] nfsd_umount+0x3b/0x60 [ 1137.547928][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1137.588538][ T31] deactivate_super+0xe7/0x110 [ 1137.633969][ T31] cleanup_mnt+0x21f/0x450 [ 1137.680868][ T31] task_work_run+0x150/0x240 [ 1137.730683][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1137.769094][ T50] Bluetooth: hci10: command tx timeout [ 1137.792841][ T31] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1137.853361][ T31] ? rcu_is_watching+0x12/0xc0 [ 1137.906938][ T31] do_syscall_64+0x652/0x840 [ 1137.954056][ T31] ? clear_bhb_loop+0x40/0x90 [ 1138.004261][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.068497][ T31] RIP: 0033:0x7fd35019e097 [ 1138.128292][ T31] RSP: 002b:00007ffcf4112618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1138.205040][ T31] RAX: 0000000000000000 RBX: 00007fd3502322ca RCX: 00007fd35019e097 [ 1138.279840][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf41126d0 [ 1138.366976][ T31] RBP: 00007ffcf41126d0 R08: 00007ffcf41136d0 R09: 00000000ffffffff [ 1138.431584][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf4113760 [ 1138.516855][ T31] R13: 00007fd3502322ca R14: 00000000000f0cd3 R15: 00007ffcf41137a0 [ 1138.587576][ T31] [ 1138.620766][ T31] [ 1138.620766][ T31] Showing all locks held in the system: [ 1138.794535][ T31] 1 lock held by khungtaskd/31: [ 1138.847600][ T31] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1138.952115][ T31] 2 locks held by kworker/u8:2/36: [ 1139.005103][ T31] #0: ffff88801ef75940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1139.111378][ T31] #1: ffffc90000ac7d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1139.212541][ T31] 1 lock held by syz-executor/5611: [ 1139.254742][ T31] 2 locks held by kworker/0:5/5744: [ 1139.296908][ T31] 1 lock held by udevd/13985: [ 1139.344063][ T31] 2 locks held by getty/17702: [ 1139.378372][ T31] #0: ffff888034c300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1139.456234][ T31] #1: ffffc90003b7b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1139.511370][ T31] 2 locks held by syz-executor/18306: [ 1139.569434][ T31] #0: ffff888029cf40d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1139.687363][ T31] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1139.778366][ T31] 2 locks held by syz.1.2458/19083: [ 1139.818194][ T31] #0: ffffffff906ed668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1139.861540][ T50] Bluetooth: hci10: command tx timeout [ 1139.892572][ T31] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1139.941243][ T31] 2 locks held by syz.3.2583/19888: [ 1139.963160][ T31] #0: ffffffff906ed668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1139.996485][ T31] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1140.031099][ T31] 2 locks held by syz.3.2583/19890: [ 1140.046283][ T31] #0: ffff88807b4c80d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1140.093788][ T31] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1140.121163][ T31] 3 locks held by kworker/0:7/20038: [ 1140.137057][ T31] #0: ffff88813fe67140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1140.180155][ T31] #1: ffffc90003ba7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1140.207909][ T31] #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1140.251990][ T31] 2 locks held by kworker/u8:3/20289: [ 1140.265859][ T31] #0: ffff88801ef75940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1140.298930][ T31] #1: ffffc9000426fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1140.345377][ T31] 2 locks held by syz.4.2648/20355: [ 1140.368434][ T31] #0: ffffffff906ed668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1140.393014][ T31] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1140.430588][ T31] 2 locks held by syz.2.2656/20399: [ 1140.446125][ T31] #0: ffff88802b2d40d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1140.481372][ T31] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1140.512427][ T31] 1 lock held by syz.6.2727/20824: [ 1140.536074][ T31] #0: ffff88804be1cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1140.563898][ T31] 2 locks held by syz.5.2748/20938: [ 1140.585056][ T31] #0: ffffffff906ed668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1140.609581][ T31] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1140.647072][ T31] 1 lock held by syz.7.2747/20948: [ 1140.674401][ T31] 1 lock held by syz-executor/20981: [ 1140.684660][ T31] #0: ffffffff9063edc0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x49c/0x1bb0 [ 1140.714314][ T31] 2 locks held by syz-executor/21085: [ 1140.739696][ T31] #0: ffffffff8f9c5968 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1140.773692][ T31] #1: ffffffff9063edc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1140.806534][ T31] 3 locks held by syz.8.2772/21124: [ 1140.823857][ T31] #0: ffffffff906261c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1140.850010][ T31] #1: ffffffff9063edc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1140.871000][ T31] #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1140.898471][ T31] 2 locks held by syz.8.2772/21127: [ 1140.910078][ T31] #0: ffffffff906261c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1140.931565][ T31] #1: ffffffff9063edc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1140.955213][ T31] 4 locks held by dhcpcd-run-hook/21173: [ 1140.988136][ T31] [ 1140.996754][ T31] ============================================= [ 1140.996754][ T31] [ 1141.176302][ T31] NMI backtrace for cpu 0 [ 1141.176325][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1141.176362][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1141.176371][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1141.176386][ T31] Call Trace: [ 1141.176394][ T31] [ 1141.176403][ T31] dump_stack_lvl+0x100/0x190 [ 1141.176437][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1141.176471][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1141.176503][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1141.176534][ T31] sys_info+0x141/0x190 [ 1141.176555][ T31] watchdog+0xcb1/0x1030 [ 1141.176597][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1141.176627][ T31] ? __pfx_watchdog+0x10/0x10 [ 1141.176662][ T31] ? __kthread_parkme+0x18c/0x230 [ 1141.176694][ T31] ? kthread+0x13a/0x450 [ 1141.176724][ T31] ? __pfx_watchdog+0x10/0x10 [ 1141.176757][ T31] kthread+0x370/0x450 [ 1141.176788][ T31] ? __pfx_kthread+0x10/0x10 [ 1141.176822][ T31] ret_from_fork+0x72b/0xd50 [ 1141.176854][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1141.176886][ T31] ? __switch_to+0x800/0x10f0 [ 1141.176907][ T31] ? __switch_to_asm+0x39/0x70 [ 1141.176941][ T31] ? __pfx_kthread+0x10/0x10 [ 1141.176975][ T31] ret_from_fork_asm+0x1a/0x30 [ 1141.177023][ T31] [ 1141.882122][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1141.889067][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1141.899763][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1141.904960][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1141.915029][ T31] Call Trace: [ 1141.918315][ T31] [ 1141.921254][ T31] dump_stack_lvl+0x100/0x190 [ 1141.925955][ T31] vpanic+0x552/0x970 [ 1141.929958][ T31] ? __pfx_vpanic+0x10/0x10 [ 1141.934479][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1141.940651][ T31] panic+0xd1/0xe0 [ 1141.944383][ T31] ? __pfx_panic+0x10/0x10 [ 1141.948811][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1141.954980][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1141.961155][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1141.967331][ T31] ? watchdog.cold+0x1ec/0x234 [ 1141.972111][ T31] ? watchdog+0xcc1/0x1030 [ 1141.976553][ T31] watchdog.cold+0x1fd/0x234 [ 1141.981163][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1141.986985][ T31] ? __pfx_watchdog+0x10/0x10 [ 1141.991692][ T31] ? __kthread_parkme+0x18c/0x230 [ 1141.996751][ T31] ? kthread+0x13a/0x450 [ 1142.001014][ T31] ? __pfx_watchdog+0x10/0x10 [ 1142.005711][ T31] kthread+0x370/0x450 [ 1142.009802][ T31] ? __pfx_kthread+0x10/0x10 [ 1142.014421][ T31] ret_from_fork+0x72b/0xd50 [ 1142.019032][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1142.024161][ T31] ? __switch_to+0x800/0x10f0 [ 1142.028845][ T31] ? __switch_to_asm+0x39/0x70 [ 1142.033631][ T31] ? __pfx_kthread+0x10/0x10 [ 1142.038244][ T31] ret_from_fork_asm+0x1a/0x30 [ 1142.043050][ T31] [ 1142.046157][ T31] Kernel Offset: disabled [ 1142.050497][ T31] Rebooting in 86400 seconds..